citadel/msgbase.c

   1 /*
   2  * Implements the message store.
   3  *
   4  * Copyright (c) 1987-2012 by the citadel.org team
   5  *
   6  * This program is open source software; you can redistribute it and/or modify
   7  * it under the terms of the GNU General Public License version 3.
   8  *
   9  * This program is distributed in the hope that it will be useful,
  10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  12  * GNU General Public License for more details.
  13  */
  14
  15 #include "sysdep.h"
  16 #include <stdlib.h>
  17 #include <unistd.h>
  18 #include <stdio.h>
  19 #include <fcntl.h>
  20
  21 #if TIME_WITH_SYS_TIME
  22 # include <sys/time.h>
  23 # include <time.h>
  24 #else
  25 # if HAVE_SYS_TIME_H
  26 #  include <sys/time.h>
  27 # else
  28 #  include <time.h>
  29 # endif
  30 #endif
  31
  32
  33 #include <ctype.h>
  34 #include <string.h>
  35 #include <limits.h>
  36 #include <errno.h>
  37 #include <stdarg.h>
  38 #include <sys/stat.h>
  39 #include <sys/types.h>
  40 #include <regex.h>
  41 #include <libcitadel.h>
  42 #include "citadel.h"
  43 #include "server.h"
  44 #include "serv_extensions.h"
  45 #include "database.h"
  46 #include "msgbase.h"
  47 #include "support.h"
  48 #include "sysdep_decls.h"
  49 #include "citserver.h"
  50 #include "room_ops.h"
  51 #include "user_ops.h"
  52 #include "file_ops.h"
  53 #include "config.h"
  54 #include "control.h"
  55 #include "genstamp.h"
  56 #include "internet_addressing.h"
  57 #include "euidindex.h"
  58 #include "journaling.h"
  59 #include "citadel_dirs.h"
  60 #include "clientsocket.h"
  61 #include "threads.h"
  62
  63 #include "ctdl_module.h"
  64
  65 long config_msgnum;
  66 struct addresses_to_be_filed *atbf = NULL;
  67
  68 /* This temp file holds the queue of operations for AdjRefCount() */
  69 static FILE *arcfp = NULL;
  70
  71 void AdjRefCountList(long *msgnum, long nmsg, int incr);
  72
  73 /*
  74  * These are the four-character field headers we use when outputting
  75  * messages in Citadel format (as opposed to RFC822 format).
  76  */
  77 char *msgkeys[] = {
  78         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  79         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  80         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  81         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  82         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  83         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  84         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  85         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  86         NULL,
  87         "from",
  88         NULL, NULL, NULL,
  89         "exti",
  90         "rfca",
  91         NULL,
  92         "hnod",
  93         "msgn",
  94         "jrnl",
  95         NULL,
  96         "list",
  97         "text",
  98         "node",
  99         "room",
 100         "path",
 101         NULL,
 102         "rcpt",
 103         "spec",
 104         "time",
 105         "subj",
 106         NULL,
 107         "wefw",
 108         NULL,
 109         "cccc",
 110         NULL
 111 };
 112
 113 /*
 114  * This function is self explanatory.
 115  * (What can I say, I'm in a weird mood today...)
 116  */
 117 void remove_any_whitespace_to_the_left_or_right_of_at_symbol(char *name)
 118 {
 119         int i;
 120
 121         for (i = 0; i < strlen(name); ++i) {
 122                 if (name[i] == '@') {
 123                         while (isspace(name[i - 1]) && i > 0) {
 124                                 strcpy(&name[i - 1], &name[i]);
 125                                 --i;
 126                         }
 127                         while (isspace(name[i + 1])) {
 128                                 strcpy(&name[i + 1], &name[i + 2]);
 129                         }
 130                 }
 131         }
 132 }
 133
 134
 135 /*
 136  * Aliasing for network mail.
 137  * (Error messages have been commented out, because this is a server.)
 138  */
 139 int alias(char *name)
 140 {                               /* process alias and routing info for mail */
 141         FILE *fp;
 142         int a, i;
 143         char aaa[SIZ], bbb[SIZ];
 144         char *ignetcfg = NULL;
 145         char *ignetmap = NULL;
 146         int at = 0;
 147         char node[64];
 148         char testnode[64];
 149         char buf[SIZ];
 150
 151         char original_name[256];
 152         safestrncpy(original_name, name, sizeof original_name);
 153
 154         striplt(name);
 155         remove_any_whitespace_to_the_left_or_right_of_at_symbol(name);
 156         stripallbut(name, '<', '>');
 157
 158         fp = fopen(file_mail_aliases, "r");
 159         if (fp == NULL) {
 160                 fp = fopen("/dev/null", "r");
 161         }
 162         if (fp == NULL) {
 163                 return (MES_ERROR);
 164         }
 165         strcpy(aaa, "");
 166         strcpy(bbb, "");
 167         while (fgets(aaa, sizeof aaa, fp) != NULL) {
 168                 while (isspace(name[0]))
 169                         strcpy(name, &name[1]);
 170                 aaa[strlen(aaa) - 1] = 0;
 171                 strcpy(bbb, "");
 172                 for (a = 0; a < strlen(aaa); ++a) {
 173                         if (aaa[a] == ',') {
 174                                 strcpy(bbb, &aaa[a + 1]);
 175                                 aaa[a] = 0;
 176                         }
 177                 }
 178                 if (!strcasecmp(name, aaa))
 179                         strcpy(name, bbb);
 180         }
 181         fclose(fp);
 182
 183         /* Hit the Global Address Book */
 184         if (CtdlDirectoryLookup(aaa, name, sizeof aaa) == 0) {
 185                 strcpy(name, aaa);
 186         }
 187
 188         if (strcasecmp(original_name, name)) {
 189                 syslog(LOG_INFO, "%s is being forwarded to %s\n", original_name, name);
 190         }
 191
 192         /* Change "user @ xxx" to "user" if xxx is an alias for this host */
 193         for (a=0; a<strlen(name); ++a) {
 194                 if (name[a] == '@') {
 195                         if (CtdlHostAlias(&name[a+1]) == hostalias_localhost) {
 196                                 name[a] = 0;
 197                                 syslog(LOG_INFO, "Changed to <%s>\n", name);
 198                         }
 199                 }
 200         }
 201
 202         /* determine local or remote type, see citadel.h */
 203         at = haschar(name, '@');
 204         if (at == 0) return(MES_LOCAL);         /* no @'s - local address */
 205         if (at > 1) return(MES_ERROR);          /* >1 @'s - invalid address */
 206         remove_any_whitespace_to_the_left_or_right_of_at_symbol(name);
 207
 208         /* figure out the delivery mode */
 209         extract_token(node, name, 1, '@', sizeof node);
 210
 211         /* If there are one or more dots in the nodename, we assume that it
 212          * is an FQDN and will attempt SMTP delivery to the Internet.
 213          */
 214         if (haschar(node, '.') > 0) {
 215                 return(MES_INTERNET);
 216         }
 217
 218         /* Otherwise we look in the IGnet maps for a valid Citadel node.
 219          * Try directly-connected nodes first...
 220          */
 221         ignetcfg = CtdlGetSysConfig(IGNETCFG);
 222         for (i=0; i<num_tokens(ignetcfg, '\n'); ++i) {
 223                 extract_token(buf, ignetcfg, i, '\n', sizeof buf);
 224                 extract_token(testnode, buf, 0, '|', sizeof testnode);
 225                 if (!strcasecmp(node, testnode)) {
 226                         free(ignetcfg);
 227                         return(MES_IGNET);
 228                 }
 229         }
 230         free(ignetcfg);
 231
 232         /*
 233          * Then try nodes that are two or more hops away.
 234          */
 235         ignetmap = CtdlGetSysConfig(IGNETMAP);
 236         for (i=0; i<num_tokens(ignetmap, '\n'); ++i) {
 237                 extract_token(buf, ignetmap, i, '\n', sizeof buf);
 238                 extract_token(testnode, buf, 0, '|', sizeof testnode);
 239                 if (!strcasecmp(node, testnode)) {
 240                         free(ignetmap);
 241                         return(MES_IGNET);
 242                 }
 243         }
 244         free(ignetmap);
 245
 246         /* If we get to this point it's an invalid node name */
 247         return (MES_ERROR);
 248 }
 249
 250
 251 /*
 252  * Back end for the MSGS command: output message number only.
 253  */
 254 void simple_listing(long msgnum, void *userdata)
 255 {
 256         cprintf("%ld\n", msgnum);
 257 }
 258
 259
 260
 261 /*
 262  * Back end for the MSGS command: output header summary.
 263  */
 264 void headers_listing(long msgnum, void *userdata)
 265 {
 266         struct CtdlMessage *msg;
 267
 268         msg = CtdlFetchMessage(msgnum, 0);
 269         if (msg == NULL) {
 270                 cprintf("%ld|0|||||\n", msgnum);
 271                 return;
 272         }
 273
 274         cprintf("%ld|%s|%s|%s|%s|%s|\n",
 275                 msgnum,
 276                 (msg->cm_fields['T'] ? msg->cm_fields['T'] : "0"),
 277                 (msg->cm_fields['A'] ? msg->cm_fields['A'] : ""),
 278                 (msg->cm_fields['N'] ? msg->cm_fields['N'] : ""),
 279                 (msg->cm_fields['F'] ? msg->cm_fields['F'] : ""),
 280                 (msg->cm_fields['U'] ? msg->cm_fields['U'] : "")
 281         );
 282         CtdlFreeMessage(msg);
 283 }
 284
 285 /*
 286  * Back end for the MSGS command: output EUID header.
 287  */
 288 void headers_euid(long msgnum, void *userdata)
 289 {
 290         struct CtdlMessage *msg;
 291
 292         msg = CtdlFetchMessage(msgnum, 0);
 293         if (msg == NULL) {
 294                 cprintf("%ld||\n", msgnum);
 295                 return;
 296         }
 297
 298         cprintf("%ld|%s|%s\n",
 299                 msgnum,
 300                 (msg->cm_fields['E'] ? msg->cm_fields['E'] : ""),
 301                 (msg->cm_fields['T'] ? msg->cm_fields['T'] : "0"));
 302         CtdlFreeMessage(msg);
 303 }
 304
 305
 306
 307
 308
 309 /* Determine if a given message matches the fields in a message template.
 310  * Return 0 for a successful match.
 311  */
 312 int CtdlMsgCmp(struct CtdlMessage *msg, struct CtdlMessage *template) {
 313         int i;
 314
 315         /* If there aren't any fields in the template, all messages will
 316          * match.
 317          */
 318         if (template == NULL) return(0);
 319
 320         /* Null messages are bogus. */
 321         if (msg == NULL) return(1);
 322
 323         for (i='A'; i<='Z'; ++i) {
 324                 if (template->cm_fields[i] != NULL) {
 325                         if (msg->cm_fields[i] == NULL) {
 326                                 /* Considered equal if temmplate is empty string */
 327                                 if (IsEmptyStr(template->cm_fields[i])) continue;
 328                                 return 1;
 329                         }
 330                         if (strcasecmp(msg->cm_fields[i],
 331                                 template->cm_fields[i])) return 1;
 332                 }
 333         }
 334
 335         /* All compares succeeded: we have a match! */
 336         return 0;
 337 }
 338
 339
 340
 341 /*
 342  * Retrieve the "seen" message list for the current room.
 343  */
 344 void CtdlGetSeen(char *buf, int which_set) {
 345         visit vbuf;
 346
 347         /* Learn about the user and room in question */
 348         CtdlGetRelationship(&vbuf, &CC->user, &CC->room);
 349
 350         if (which_set == ctdlsetseen_seen)
 351                 safestrncpy(buf, vbuf.v_seen, SIZ);
 352         if (which_set == ctdlsetseen_answered)
 353                 safestrncpy(buf, vbuf.v_answered, SIZ);
 354 }
 355
 356
 357
 358 /*
 359  * Manipulate the "seen msgs" string (or other message set strings)
 360  */
 361 void CtdlSetSeen(long *target_msgnums, int num_target_msgnums,
 362                 int target_setting, int which_set,
 363                 struct ctdluser *which_user, struct ctdlroom *which_room) {
 364         struct cdbdata *cdbfr;
 365         int i, k;
 366         int is_seen = 0;
 367         int was_seen = 0;
 368         long lo = (-1L);
 369         long hi = (-1L);
 370         visit vbuf;
 371         long *msglist;
 372         int num_msgs = 0;
 373         StrBuf *vset;
 374         StrBuf *setstr;
 375         StrBuf *lostr;
 376         StrBuf *histr;
 377         const char *pvset;
 378         char *is_set;   /* actually an array of booleans */
 379
 380         /* Don't bother doing *anything* if we were passed a list of zero messages */
 381         if (num_target_msgnums < 1) {
 382                 return;
 383         }
 384
 385         /* If no room was specified, we go with the current room. */
 386         if (!which_room) {
 387                 which_room = &CC->room;
 388         }
 389
 390         /* If no user was specified, we go with the current user. */
 391         if (!which_user) {
 392                 which_user = &CC->user;
 393         }
 394
 395         syslog(LOG_DEBUG, "CtdlSetSeen(%d msgs starting with %ld, %s, %d) in <%s>\n",
 396                 num_target_msgnums, target_msgnums[0],
 397                 (target_setting ? "SET" : "CLEAR"),
 398                 which_set,
 399                 which_room->QRname);
 400
 401         /* Learn about the user and room in question */
 402         CtdlGetRelationship(&vbuf, which_user, which_room);
 403
 404         /* Load the message list */
 405         cdbfr = cdb_fetch(CDB_MSGLISTS, &which_room->QRnumber, sizeof(long));
 406         if (cdbfr != NULL) {
 407                 msglist = (long *) cdbfr->ptr;
 408                 cdbfr->ptr = NULL;      /* CtdlSetSeen() now owns this memory */
 409                 num_msgs = cdbfr->len / sizeof(long);
 410                 cdb_free(cdbfr);
 411         } else {
 412                 return; /* No messages at all?  No further action. */
 413         }
 414
 415         is_set = malloc(num_msgs * sizeof(char));
 416         memset(is_set, 0, (num_msgs * sizeof(char)) );
 417
 418         /* Decide which message set we're manipulating */
 419         switch(which_set) {
 420         case ctdlsetseen_seen:
 421                 vset = NewStrBufPlain(vbuf.v_seen, -1);
 422                 break;
 423         case ctdlsetseen_answered:
 424                 vset = NewStrBufPlain(vbuf.v_answered, -1);
 425                 break;
 426         default:
 427                 vset = NewStrBuf();
 428         }
 429
 430
 431 #if 0   /* This is a special diagnostic section.  Do not allow it to run during normal operation. */
 432         syslog(LOG_DEBUG, "There are %d messages in the room.\n", num_msgs);
 433         for (i=0; i<num_msgs; ++i) {
 434                 if ((i > 0) && (msglist[i] <= msglist[i-1])) abort();
 435         }
 436         syslog(LOG_DEBUG, "We are twiddling %d of them.\n", num_target_msgnums);
 437         for (k=0; k<num_target_msgnums; ++k) {
 438                 if ((k > 0) && (target_msgnums[k] <= target_msgnums[k-1])) abort();
 439         }
 440 #endif
 441
 442         syslog(LOG_DEBUG, "before update: %s\n", ChrPtr(vset));
 443
 444         /* Translate the existing sequence set into an array of booleans */
 445         setstr = NewStrBuf();
 446         lostr = NewStrBuf();
 447         histr = NewStrBuf();
 448         pvset = NULL;
 449         while (StrBufExtract_NextToken(setstr, vset, &pvset, ',') >= 0) {
 450
 451                 StrBufExtract_token(lostr, setstr, 0, ':');
 452                 if (StrBufNum_tokens(setstr, ':') >= 2) {
 453                         StrBufExtract_token(histr, setstr, 1, ':');
 454                 }
 455                 else {
 456                         FlushStrBuf(histr);
 457                         StrBufAppendBuf(histr, lostr, 0);
 458                 }
 459                 lo = StrTol(lostr);
 460                 if (!strcmp(ChrPtr(histr), "*")) {
 461                         hi = LONG_MAX;
 462                 }
 463                 else {
 464                         hi = StrTol(histr);
 465                 }
 466
 467                 for (i = 0; i < num_msgs; ++i) {
 468                         if ((msglist[i] >= lo) && (msglist[i] <= hi)) {
 469                                 is_set[i] = 1;
 470                         }
 471                 }
 472         }
 473         FreeStrBuf(&setstr);
 474         FreeStrBuf(&lostr);
 475         FreeStrBuf(&histr);
 476
 477
 478         /* Now translate the array of booleans back into a sequence set */
 479         FlushStrBuf(vset);
 480         was_seen = 0;
 481         lo = (-1);
 482         hi = (-1);
 483
 484         for (i=0; i<num_msgs; ++i) {
 485                 is_seen = is_set[i];
 486
 487                 /* Apply changes */
 488                 for (k=0; k<num_target_msgnums; ++k) {
 489                         if (msglist[i] == target_msgnums[k]) {
 490                                 is_seen = target_setting;
 491                         }
 492                 }
 493
 494                 if ((was_seen == 0) && (is_seen == 1)) {
 495                         lo = msglist[i];
 496                 }
 497                 else if ((was_seen == 1) && (is_seen == 0)) {
 498                         hi = msglist[i-1];
 499
 500                         if (StrLength(vset) > 0) {
 501                                 StrBufAppendBufPlain(vset, HKEY(","), 0);
 502                         }
 503                         if (lo == hi) {
 504                                 StrBufAppendPrintf(vset, "%ld", hi);
 505                         }
 506                         else {
 507                                 StrBufAppendPrintf(vset, "%ld:%ld", lo, hi);
 508                         }
 509                 }
 510
 511                 if ((is_seen) && (i == num_msgs - 1)) {
 512                         if (StrLength(vset) > 0) {
 513                                 StrBufAppendBufPlain(vset, HKEY(","), 0);
 514                         }
 515                         if ((i==0) || (was_seen == 0)) {
 516                                 StrBufAppendPrintf(vset, "%ld", msglist[i]);
 517                         }
 518                         else {
 519                                 StrBufAppendPrintf(vset, "%ld:%ld", lo, msglist[i]);
 520                         }
 521                 }
 522
 523                 was_seen = is_seen;
 524         }
 525
 526         /*
 527          * We will have to stuff this string back into a 4096 byte buffer, so if it's
 528          * larger than that now, truncate it by removing tokens from the beginning.
 529          * The limit of 100 iterations is there to prevent an infinite loop in case
 530          * something unexpected happens.
 531          */
 532         int number_of_truncations = 0;
 533         while ( (StrLength(vset) > SIZ) && (number_of_truncations < 100) ) {
 534                 StrBufRemove_token(vset, 0, ',');
 535                 ++number_of_truncations;
 536         }
 537
 538         /*
 539          * If we're truncating the sequence set of messages marked with the 'seen' flag,
 540          * we want the earliest messages (the truncated ones) to be marked, not unmarked.
 541          * Otherwise messages at the beginning will suddenly appear to be 'unseen'.
 542          */
 543         if ( (which_set == ctdlsetseen_seen) && (number_of_truncations > 0) ) {
 544                 StrBuf *first_tok;
 545                 first_tok = NewStrBuf();
 546                 StrBufExtract_token(first_tok, vset, 0, ',');
 547                 StrBufRemove_token(vset, 0, ',');
 548
 549                 if (StrBufNum_tokens(first_tok, ':') > 1) {
 550                         StrBufRemove_token(first_tok, 0, ':');
 551                 }
 552
 553                 StrBuf *new_set;
 554                 new_set = NewStrBuf();
 555                 StrBufAppendBufPlain(new_set, HKEY("1:"), 0);
 556                 StrBufAppendBuf(new_set, first_tok, 0);
 557                 StrBufAppendBufPlain(new_set, HKEY(":"), 0);
 558                 StrBufAppendBuf(new_set, vset, 0);
 559
 560                 FreeStrBuf(&vset);
 561                 FreeStrBuf(&first_tok);
 562                 vset = new_set;
 563         }
 564
 565         syslog(LOG_DEBUG, " after update: %s\n", ChrPtr(vset));
 566
 567         /* Decide which message set we're manipulating */
 568         switch (which_set) {
 569                 case ctdlsetseen_seen:
 570                         safestrncpy(vbuf.v_seen, ChrPtr(vset), sizeof vbuf.v_seen);
 571                         break;
 572                 case ctdlsetseen_answered:
 573                         safestrncpy(vbuf.v_answered, ChrPtr(vset), sizeof vbuf.v_answered);
 574                         break;
 575         }
 576
 577         free(is_set);
 578         free(msglist);
 579         CtdlSetRelationship(&vbuf, which_user, which_room);
 580         FreeStrBuf(&vset);
 581 }
 582
 583
 584 /*
 585  * API function to perform an operation for each qualifying message in the
 586  * current room.  (Returns the number of messages processed.)
 587  */
 588 int CtdlForEachMessage(int mode, long ref, char *search_string,
 589                         char *content_type,
 590                         struct CtdlMessage *compare,
 591                         ForEachMsgCallback CallBack,
 592                         void *userdata)
 593 {
 594
 595         int a, i, j;
 596         visit vbuf;
 597         struct cdbdata *cdbfr;
 598         long *msglist = NULL;
 599         int num_msgs = 0;
 600         int num_processed = 0;
 601         long thismsg;
 602         struct MetaData smi;
 603         struct CtdlMessage *msg = NULL;
 604         int is_seen = 0;
 605         long lastold = 0L;
 606         int printed_lastold = 0;
 607         int num_search_msgs = 0;
 608         long *search_msgs = NULL;
 609         regex_t re;
 610         int need_to_free_re = 0;
 611         regmatch_t pm;
 612
 613         if ((content_type) && (!IsEmptyStr(content_type))) {
 614                 regcomp(&re, content_type, 0);
 615                 need_to_free_re = 1;
 616         }
 617
 618         /* Learn about the user and room in question */
 619         if (server_shutting_down) {
 620                 if (need_to_free_re) regfree(&re);
 621                 return -1;
 622         }
 623         CtdlGetUser(&CC->user, CC->curr_user);
 624
 625         if (server_shutting_down) {
 626                 if (need_to_free_re) regfree(&re);
 627                 return -1;
 628         }
 629         CtdlGetRelationship(&vbuf, &CC->user, &CC->room);
 630
 631         if (server_shutting_down) {
 632                 if (need_to_free_re) regfree(&re);
 633                 return -1;
 634         }
 635
 636         /* Load the message list */
 637         cdbfr = cdb_fetch(CDB_MSGLISTS, &CC->room.QRnumber, sizeof(long));
 638         if (cdbfr == NULL) {
 639                 if (need_to_free_re) regfree(&re);
 640                 return 0;       /* No messages at all?  No further action. */
 641         }
 642
 643         msglist = (long *) cdbfr->ptr;
 644         num_msgs = cdbfr->len / sizeof(long);
 645
 646         cdbfr->ptr = NULL;      /* clear this so that cdb_free() doesn't free it */
 647         cdb_free(cdbfr);        /* we own this memory now */
 648
 649         /*
 650          * Now begin the traversal.
 651          */
 652         if (num_msgs > 0) for (a = 0; a < num_msgs; ++a) {
 653
 654                 /* If the caller is looking for a specific MIME type, filter
 655                  * out all messages which are not of the type requested.
 656                  */
 657                 if ((content_type != NULL) && (!IsEmptyStr(content_type))) {
 658
 659                         /* This call to GetMetaData() sits inside this loop
 660                          * so that we only do the extra database read per msg
 661                          * if we need to.  Doing the extra read all the time
 662                          * really kills the server.  If we ever need to use
 663                          * metadata for another search criterion, we need to
 664                          * move the read somewhere else -- but still be smart
 665                          * enough to only do the read if the caller has
 666                          * specified something that will need it.
 667                          */
 668                         if (server_shutting_down) {
 669                                 if (need_to_free_re) regfree(&re);
 670                                 free(msglist);
 671                                 return -1;
 672                         }
 673                         GetMetaData(&smi, msglist[a]);
 674
 675                         /* if (strcasecmp(smi.meta_content_type, content_type)) { old non-regex way */
 676                         if (regexec(&re, smi.meta_content_type, 1, &pm, 0) != 0) {
 677                                 msglist[a] = 0L;
 678                         }
 679                 }
 680         }
 681
 682         num_msgs = sort_msglist(msglist, num_msgs);
 683
 684         /* If a template was supplied, filter out the messages which
 685          * don't match.  (This could induce some delays!)
 686          */
 687         if (num_msgs > 0) {
 688                 if (compare != NULL) {
 689                         for (a = 0; a < num_msgs; ++a) {
 690                                 if (server_shutting_down) {
 691                                         if (need_to_free_re) regfree(&re);
 692                                         free(msglist);
 693                                         return -1;
 694                                 }
 695                                 msg = CtdlFetchMessage(msglist[a], 1);
 696                                 if (msg != NULL) {
 697                                         if (CtdlMsgCmp(msg, compare)) {
 698                                                 msglist[a] = 0L;
 699                                         }
 700                                         CtdlFreeMessage(msg);
 701                                 }
 702                         }
 703                 }
 704         }
 705
 706         /* If a search string was specified, get a message list from
 707          * the full text index and remove messages which aren't on both
 708          * lists.
 709          *
 710          * How this works:
 711          * Since the lists are sorted and strictly ascending, and the
 712          * output list is guaranteed to be shorter than or equal to the
 713          * input list, we overwrite the bottom of the input list.  This
 714          * eliminates the need to memmove big chunks of the list over and
 715          * over again.
 716          */
 717         if ( (num_msgs > 0) && (mode == MSGS_SEARCH) && (search_string) ) {
 718
 719                 /* Call search module via hook mechanism.
 720                  * NULL means use any search function available.
 721                  * otherwise replace with a char * to name of search routine
 722                  */
 723                 CtdlModuleDoSearch(&num_search_msgs, &search_msgs, search_string, "fulltext");
 724
 725                 if (num_search_msgs > 0) {
 726
 727                         int orig_num_msgs;
 728
 729                         orig_num_msgs = num_msgs;
 730                         num_msgs = 0;
 731                         for (i=0; i<orig_num_msgs; ++i) {
 732                                 for (j=0; j<num_search_msgs; ++j) {
 733                                         if (msglist[i] == search_msgs[j]) {
 734                                                 msglist[num_msgs++] = msglist[i];
 735                                         }
 736                                 }
 737                         }
 738                 }
 739                 else {
 740                         num_msgs = 0;   /* No messages qualify */
 741                 }
 742                 if (search_msgs != NULL) free(search_msgs);
 743
 744                 /* Now that we've purged messages which don't contain the search
 745                  * string, treat a MSGS_SEARCH just like a MSGS_ALL from this
 746                  * point on.
 747                  */
 748                 mode = MSGS_ALL;
 749         }
 750
 751         /*
 752          * Now iterate through the message list, according to the
 753          * criteria supplied by the caller.
 754          */
 755         if (num_msgs > 0)
 756                 for (a = 0; a < num_msgs; ++a) {
 757                         if (server_shutting_down) {
 758                                 if (need_to_free_re) regfree(&re);
 759                                 free(msglist);
 760                                 return num_processed;
 761                         }
 762                         thismsg = msglist[a];
 763                         if (mode == MSGS_ALL) {
 764                                 is_seen = 0;
 765                         }
 766                         else {
 767                                 is_seen = is_msg_in_sequence_set(
 768                                                         vbuf.v_seen, thismsg);
 769                                 if (is_seen) lastold = thismsg;
 770                         }
 771                         if ((thismsg > 0L)
 772                             && (
 773
 774                                        (mode == MSGS_ALL)
 775                                        || ((mode == MSGS_OLD) && (is_seen))
 776                                        || ((mode == MSGS_NEW) && (!is_seen))
 777                                        || ((mode == MSGS_LAST) && (a >= (num_msgs - ref)))
 778                                    || ((mode == MSGS_FIRST) && (a < ref))
 779                                 || ((mode == MSGS_GT) && (thismsg > ref))
 780                                 || ((mode == MSGS_LT) && (thismsg < ref))
 781                                 || ((mode == MSGS_EQ) && (thismsg == ref))
 782                             )
 783                             ) {
 784                                 if ((mode == MSGS_NEW) && (CC->user.flags & US_LASTOLD) && (lastold > 0L) && (printed_lastold == 0) && (!is_seen)) {
 785                                         if (CallBack)
 786                                                 CallBack(lastold, userdata);
 787                                         printed_lastold = 1;
 788                                         ++num_processed;
 789                                 }
 790                                 if (CallBack) CallBack(thismsg, userdata);
 791                                 ++num_processed;
 792                         }
 793                 }
 794         if (need_to_free_re) regfree(&re);
 795
 796         /*
 797          * We cache the most recent msglist in order to do security checks later
 798          */
 799         if (CC->client_socket > 0) {
 800                 if (CC->cached_msglist != NULL) {
 801                         free(CC->cached_msglist);
 802                 }
 803                 CC->cached_msglist = msglist;
 804                 CC->cached_num_msgs = num_msgs;
 805         }
 806         else {
 807                 free(msglist);
 808         }
 809
 810         return num_processed;
 811 }
 812
 813
 814
 815 /*
 816  * cmd_msgs()  -  get list of message #'s in this room
 817  *              implements the MSGS server command using CtdlForEachMessage()
 818  */
 819 void cmd_msgs(char *cmdbuf)
 820 {
 821         int mode = 0;
 822         char which[16];
 823         char buf[256];
 824         char tfield[256];
 825         char tvalue[256];
 826         int cm_ref = 0;
 827         int i;
 828         int with_template = 0;
 829         struct CtdlMessage *template = NULL;
 830         char search_string[1024];
 831         ForEachMsgCallback CallBack;
 832
 833         if (CtdlAccessCheck(ac_logged_in_or_guest)) return;
 834
 835         extract_token(which, cmdbuf, 0, '|', sizeof which);
 836         cm_ref = extract_int(cmdbuf, 1);
 837         extract_token(search_string, cmdbuf, 1, '|', sizeof search_string);
 838         with_template = extract_int(cmdbuf, 2);
 839         switch (extract_int(cmdbuf, 3))
 840         {
 841         default:
 842         case MSG_HDRS_BRIEF:
 843                 CallBack = simple_listing;
 844                 break;
 845         case MSG_HDRS_ALL:
 846                 CallBack = headers_listing;
 847                 break;
 848         case MSG_HDRS_EUID:
 849                 CallBack = headers_euid;
 850                 break;
 851         }
 852
 853         strcat(which, "   ");
 854         if (!strncasecmp(which, "OLD", 3))
 855                 mode = MSGS_OLD;
 856         else if (!strncasecmp(which, "NEW", 3))
 857                 mode = MSGS_NEW;
 858         else if (!strncasecmp(which, "FIRST", 5))
 859                 mode = MSGS_FIRST;
 860         else if (!strncasecmp(which, "LAST", 4))
 861                 mode = MSGS_LAST;
 862         else if (!strncasecmp(which, "GT", 2))
 863                 mode = MSGS_GT;
 864         else if (!strncasecmp(which, "LT", 2))
 865                 mode = MSGS_LT;
 866         else if (!strncasecmp(which, "SEARCH", 6))
 867                 mode = MSGS_SEARCH;
 868         else
 869                 mode = MSGS_ALL;
 870
 871         if ( (mode == MSGS_SEARCH) && (!config.c_enable_fulltext) ) {
 872                 cprintf("%d Full text index is not enabled on this server.\n",
 873                         ERROR + CMD_NOT_SUPPORTED);
 874                 return;
 875         }
 876
 877         if (with_template) {
 878                 unbuffer_output();
 879                 cprintf("%d Send template then receive message list\n",
 880                         START_CHAT_MODE);
 881                 template = (struct CtdlMessage *)
 882                         malloc(sizeof(struct CtdlMessage));
 883                 memset(template, 0, sizeof(struct CtdlMessage));
 884                 template->cm_magic = CTDLMESSAGE_MAGIC;
 885                 template->cm_anon_type = MES_NORMAL;
 886
 887                 while(client_getln(buf, sizeof buf) >= 0 && strcmp(buf,"000")) {
 888                         extract_token(tfield, buf, 0, '|', sizeof tfield);
 889                         extract_token(tvalue, buf, 1, '|', sizeof tvalue);
 890                         for (i='A'; i<='Z'; ++i) if (msgkeys[i]!=NULL) {
 891                                 if (!strcasecmp(tfield, msgkeys[i])) {
 892                                         template->cm_fields[i] =
 893                                                 strdup(tvalue);
 894                                 }
 895                         }
 896                 }
 897                 buffer_output();
 898         }
 899         else {
 900                 cprintf("%d  \n", LISTING_FOLLOWS);
 901         }
 902
 903         CtdlForEachMessage(mode,
 904                            ( (mode == MSGS_SEARCH) ? 0 : cm_ref ),
 905                            ( (mode == MSGS_SEARCH) ? search_string : NULL ),
 906                            NULL,
 907                            template,
 908                            CallBack,
 909                            NULL);
 910         if (template != NULL) CtdlFreeMessage(template);
 911         cprintf("000\n");
 912 }
 913
 914
 915
 916
 917 /*
 918  * help_subst()  -  support routine for help file viewer
 919  */
 920 void help_subst(char *strbuf, char *source, char *dest)
 921 {
 922         char workbuf[SIZ];
 923         int p;
 924
 925         while (p = pattern2(strbuf, source), (p >= 0)) {
 926                 strcpy(workbuf, &strbuf[p + strlen(source)]);
 927                 strcpy(&strbuf[p], dest);
 928                 strcat(strbuf, workbuf);
 929         }
 930 }
 931
 932
 933 void do_help_subst(char *buffer)
 934 {
 935         char buf2[16];
 936
 937         help_subst(buffer, "^nodename", config.c_nodename);
 938         help_subst(buffer, "^humannode", config.c_humannode);
 939         help_subst(buffer, "^fqdn", config.c_fqdn);
 940         help_subst(buffer, "^username", CC->user.fullname);
 941         snprintf(buf2, sizeof buf2, "%ld", CC->user.usernum);
 942         help_subst(buffer, "^usernum", buf2);
 943         help_subst(buffer, "^sysadm", config.c_sysadm);
 944         help_subst(buffer, "^variantname", CITADEL);
 945         snprintf(buf2, sizeof buf2, "%d", config.c_maxsessions);
 946         help_subst(buffer, "^maxsessions", buf2);
 947         help_subst(buffer, "^bbsdir", ctdl_message_dir);
 948 }
 949
 950
 951
 952 /*
 953  * memfmout()  -  Citadel text formatter and paginator.
 954  *           Although the original purpose of this routine was to format
 955  *           text to the reader's screen width, all we're really using it
 956  *           for here is to format text out to 80 columns before sending it
 957  *           to the client.  The client software may reformat it again.
 958  */
 959 void memfmout(
 960         char *mptr,             /* where are we going to get our text from? */
 961         const char *nl          /* string to terminate lines with */
 962 ) {
 963         int column = 0;
 964         unsigned char ch = 0;
 965         char outbuf[1024];
 966         int len = 0;
 967         int nllen = 0;
 968
 969         if (!mptr) return;
 970         nllen = strlen(nl);
 971         while (ch=*(mptr++), ch != 0) {
 972
 973                 if (ch == '\n') {
 974                         if (client_write(outbuf, len) == -1)
 975                         {
 976                                 syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
 977                                 return;
 978                         }
 979                         len = 0;
 980                         if (client_write(nl, nllen) == -1)
 981                         {
 982                                 syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
 983                                 return;
 984                         }
 985                         column = 0;
 986                 }
 987                 else if (ch == '\r') {
 988                         /* Ignore carriage returns.  Newlines are always LF or CRLF but never CR. */
 989                 }
 990                 else if (isspace(ch)) {
 991                         if (column > 72) {              /* Beyond 72 columns, break on the next space */
 992                                 if (client_write(outbuf, len) == -1)
 993                                 {
 994                                         syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
 995                                         return;
 996                                 }
 997                                 len = 0;
 998                                 if (client_write(nl, nllen) == -1)
 999                                 {
1000                                         syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
1001                                         return;
1002                                 }
1003                                 column = 0;
1004                         }
1005                         else {
1006                                 outbuf[len++] = ch;
1007                                 ++column;
1008                         }
1009                 }
1010                 else {
1011                         outbuf[len++] = ch;
1012                         ++column;
1013                         if (column > 1000) {            /* Beyond 1000 columns, break anywhere */
1014                                 if (client_write(outbuf, len) == -1)
1015                                 {
1016                                         syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
1017                                         return;
1018                                 }
1019                                 len = 0;
1020                                 if (client_write(nl, nllen) == -1)
1021                                 {
1022                                         syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
1023                                         return;
1024                                 }
1025                                 column = 0;
1026                         }
1027                 }
1028         }
1029         if (len) {
1030                 if (client_write(outbuf, len) == -1)
1031                 {
1032                         syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
1033                         return;
1034                 }
1035                 len = 0;
1036                 client_write(nl, nllen);
1037                 column = 0;
1038         }
1039 }
1040
1041
1042
1043 /*
1044  * Callback function for mime parser that simply lists the part
1045  */
1046 void list_this_part(char *name, char *filename, char *partnum, char *disp,
1047                     void *content, char *cbtype, char *cbcharset, size_t length, char *encoding,
1048                     char *cbid, void *cbuserdata)
1049 {
1050         struct ma_info *ma;
1051
1052         ma = (struct ma_info *)cbuserdata;
1053         if (ma->is_ma == 0) {
1054                 cprintf("part=%s|%s|%s|%s|%s|%ld|%s|%s\n",
1055                         name,
1056                         filename,
1057                         partnum,
1058                         disp,
1059                         cbtype,
1060                         (long)length,
1061                         cbid,
1062                         cbcharset);
1063         }
1064 }
1065
1066 /*
1067  * Callback function for multipart prefix
1068  */
1069 void list_this_pref(char *name, char *filename, char *partnum, char *disp,
1070                     void *content, char *cbtype, char *cbcharset, size_t length, char *encoding,
1071                     char *cbid, void *cbuserdata)
1072 {
1073         struct ma_info *ma;
1074
1075         ma = (struct ma_info *)cbuserdata;
1076         if (!strcasecmp(cbtype, "multipart/alternative")) {
1077                 ++ma->is_ma;
1078         }
1079
1080         if (ma->is_ma == 0) {
1081                 cprintf("pref=%s|%s\n", partnum, cbtype);
1082         }
1083 }
1084
1085 /*
1086  * Callback function for multipart sufffix
1087  */
1088 void list_this_suff(char *name, char *filename, char *partnum, char *disp,
1089                     void *content, char *cbtype, char *cbcharset, size_t length, char *encoding,
1090                     char *cbid, void *cbuserdata)
1091 {
1092         struct ma_info *ma;
1093
1094         ma = (struct ma_info *)cbuserdata;
1095         if (ma->is_ma == 0) {
1096                 cprintf("suff=%s|%s\n", partnum, cbtype);
1097         }
1098         if (!strcasecmp(cbtype, "multipart/alternative")) {
1099                 --ma->is_ma;
1100         }
1101 }
1102
1103
1104 /*
1105  * Callback function for mime parser that opens a section for downloading
1106  */
1107 void mime_download(char *name, char *filename, char *partnum, char *disp,
1108                    void *content, char *cbtype, char *cbcharset, size_t length,
1109                    char *encoding, char *cbid, void *cbuserdata)
1110 {
1111         int rv = 0;
1112         CitContext *CCC = MyContext();
1113
1114         /* Silently go away if there's already a download open. */
1115         if (CCC->download_fp != NULL)
1116                 return;
1117
1118         if (
1119                 (!IsEmptyStr(partnum) && (!strcasecmp(CCC->download_desired_section, partnum)))
1120         ||      (!IsEmptyStr(cbid) && (!strcasecmp(CCC->download_desired_section, cbid)))
1121         ) {
1122                 CCC->download_fp = tmpfile();
1123                 if (CCC->download_fp == NULL) {
1124                         syslog(LOG_EMERG, "mime_download(): Couldn't write: %s\n",
1125                                strerror(errno));
1126                         cprintf("%d cannot open temporary file: %s\n",
1127                                 ERROR + INTERNAL_ERROR, strerror(errno));
1128                         return;
1129                 }
1130
1131                 rv = fwrite(content, length, 1, CC->download_fp);
1132                 if (rv <= 0) {
1133                         syslog(LOG_EMERG, "mime_download(): Couldn't write: %s\n",
1134                                strerror(errno));
1135                         cprintf("%d unable to write tempfile.\n",
1136                                 ERROR + TOO_BIG);
1137                         fclose(CCC->download_fp);
1138                         CCC->download_fp = NULL;
1139                         return;
1140                 }
1141                 fflush(CCC->download_fp);
1142                 rewind(CCC->download_fp);
1143
1144                 OpenCmdResult(filename, cbtype);
1145         }
1146 }
1147
1148
1149
1150 /*
1151  * Callback function for mime parser that outputs a section all at once.
1152  * We can specify the desired section by part number *or* content-id.
1153  */
1154 void mime_spew_section(char *name, char *filename, char *partnum, char *disp,
1155                    void *content, char *cbtype, char *cbcharset, size_t length,
1156                    char *encoding, char *cbid, void *cbuserdata)
1157 {
1158         int *found_it = (int *)cbuserdata;
1159
1160         if (
1161                 (!IsEmptyStr(partnum) && (!strcasecmp(CC->download_desired_section, partnum)))
1162         ||      (!IsEmptyStr(cbid) && (!strcasecmp(CC->download_desired_section, cbid)))
1163         ) {
1164                 *found_it = 1;
1165                 cprintf("%d %d|-1|%s|%s|%s\n",
1166                         BINARY_FOLLOWS,
1167                         (int)length,
1168                         filename,
1169                         cbtype,
1170                         cbcharset
1171                 );
1172                 client_write(content, length);
1173         }
1174 }
1175
1176
1177 /*
1178  * Load a message from disk into memory.
1179  * This is used by CtdlOutputMsg() and other fetch functions.
1180  *
1181  * NOTE: Caller is responsible for freeing the returned CtdlMessage struct
1182  *       using the CtdlMessageFree() function.
1183  */
1184 struct CtdlMessage *CtdlFetchMessage(long msgnum, int with_body)
1185 {
1186         struct cdbdata *dmsgtext;
1187         struct CtdlMessage *ret = NULL;
1188         char *mptr;
1189         char *upper_bound;
1190         cit_uint8_t ch;
1191         cit_uint8_t field_header;
1192
1193         syslog(LOG_DEBUG, "CtdlFetchMessage(%ld, %d)\n", msgnum, with_body);
1194         dmsgtext = cdb_fetch(CDB_MSGMAIN, &msgnum, sizeof(long));
1195         if (dmsgtext == NULL) {
1196                 return NULL;
1197         }
1198         mptr = dmsgtext->ptr;
1199         upper_bound = mptr + dmsgtext->len;
1200
1201         /* Parse the three bytes that begin EVERY message on disk.
1202          * The first is always 0xFF, the on-disk magic number.
1203          * The second is the anonymous/public type byte.
1204          * The third is the format type byte (vari, fixed, or MIME).
1205          */
1206         ch = *mptr++;
1207         if (ch != 255) {
1208                 syslog(LOG_ERR, "Message %ld appears to be corrupted.\n", msgnum);
1209                 cdb_free(dmsgtext);
1210                 return NULL;
1211         }
1212         ret = (struct CtdlMessage *) malloc(sizeof(struct CtdlMessage));
1213         memset(ret, 0, sizeof(struct CtdlMessage));
1214
1215         ret->cm_magic = CTDLMESSAGE_MAGIC;
1216         ret->cm_anon_type = *mptr++;    /* Anon type byte */
1217         ret->cm_format_type = *mptr++;  /* Format type byte */
1218
1219         /*
1220          * The rest is zero or more arbitrary fields.  Load them in.
1221          * We're done when we encounter either a zero-length field or
1222          * have just processed the 'M' (message text) field.
1223          */
1224         do {
1225                 if (mptr >= upper_bound) {
1226                         break;
1227                 }
1228                 field_header = *mptr++;
1229                 ret->cm_fields[field_header] = strdup(mptr);
1230
1231                 while (*mptr++ != 0);   /* advance to next field */
1232
1233         } while ((mptr < upper_bound) && (field_header != 'M'));
1234
1235         cdb_free(dmsgtext);
1236
1237         /* Always make sure there's something in the msg text field.  If
1238          * it's NULL, the message text is most likely stored separately,
1239          * so go ahead and fetch that.  Failing that, just set a dummy
1240          * body so other code doesn't barf.
1241          */
1242         if ( (ret->cm_fields['M'] == NULL) && (with_body) ) {
1243                 dmsgtext = cdb_fetch(CDB_BIGMSGS, &msgnum, sizeof(long));
1244                 if (dmsgtext != NULL) {
1245                         ret->cm_fields['M'] = dmsgtext->ptr;
1246                         dmsgtext->ptr = NULL;
1247                         cdb_free(dmsgtext);
1248                 }
1249         }
1250         if (ret->cm_fields['M'] == NULL) {
1251                 ret->cm_fields['M'] = strdup("\r\n\r\n (no text)\r\n");
1252         }
1253
1254         /* Perform "before read" hooks (aborting if any return nonzero) */
1255         if (PerformMessageHooks(ret, EVT_BEFOREREAD) > 0) {
1256                 CtdlFreeMessage(ret);
1257                 return NULL;
1258         }
1259
1260         return (ret);
1261 }
1262
1263
1264 /*
1265  * Returns 1 if the supplied pointer points to a valid Citadel message.
1266  * If the pointer is NULL or the magic number check fails, returns 0.
1267  */
1268 int is_valid_message(struct CtdlMessage *msg) {
1269         if (msg == NULL)
1270                 return 0;
1271         if ((msg->cm_magic) != CTDLMESSAGE_MAGIC) {
1272                 syslog(LOG_WARNING, "is_valid_message() -- self-check failed\n");
1273                 return 0;
1274         }
1275         return 1;
1276 }
1277
1278 void CtdlFreeMessageContents(struct CtdlMessage *msg)
1279 {
1280         int i;
1281
1282         for (i = 0; i < 256; ++i)
1283                 if (msg->cm_fields[i] != NULL) {
1284                         free(msg->cm_fields[i]);
1285                 }
1286
1287         msg->cm_magic = 0;      /* just in case */
1288 }
1289 /*
1290  * 'Destructor' for struct CtdlMessage
1291  */
1292 void CtdlFreeMessage(struct CtdlMessage *msg)
1293 {
1294         if (is_valid_message(msg) == 0)
1295         {
1296                 if (msg != NULL) free (msg);
1297                 return;
1298         }
1299         CtdlFreeMessageContents(msg);
1300         free(msg);
1301 }
1302
1303
1304 /*
1305  * Pre callback function for multipart/alternative
1306  *
1307  * NOTE: this differs from the standard behavior for a reason.  Normally when
1308  *       displaying multipart/alternative you want to show the _last_ usable
1309  *       format in the message.  Here we show the _first_ one, because it's
1310  *       usually text/plain.  Since this set of functions is designed for text
1311  *       output to non-MIME-aware clients, this is the desired behavior.
1312  *
1313  */
1314 void fixed_output_pre(char *name, char *filename, char *partnum, char *disp,
1315                 void *content, char *cbtype, char *cbcharset, size_t length, char *encoding,
1316                 char *cbid, void *cbuserdata)
1317 {
1318         struct ma_info *ma;
1319
1320         ma = (struct ma_info *)cbuserdata;
1321         syslog(LOG_DEBUG, "fixed_output_pre() type=<%s>\n", cbtype);
1322         if (!strcasecmp(cbtype, "multipart/alternative")) {
1323                 ++ma->is_ma;
1324                 ma->did_print = 0;
1325         }
1326         if (!strcasecmp(cbtype, "message/rfc822")) {
1327                 ++ma->freeze;
1328         }
1329 }
1330
1331 /*
1332  * Post callback function for multipart/alternative
1333  */
1334 void fixed_output_post(char *name, char *filename, char *partnum, char *disp,
1335                 void *content, char *cbtype, char *cbcharset, size_t length,
1336                 char *encoding, char *cbid, void *cbuserdata)
1337 {
1338         struct ma_info *ma;
1339
1340         ma = (struct ma_info *)cbuserdata;
1341         syslog(LOG_DEBUG, "fixed_output_post() type=<%s>\n", cbtype);
1342         if (!strcasecmp(cbtype, "multipart/alternative")) {
1343                 --ma->is_ma;
1344                 ma->did_print = 0;
1345         }
1346         if (!strcasecmp(cbtype, "message/rfc822")) {
1347                 --ma->freeze;
1348         }
1349 }
1350
1351 /*
1352  * Inline callback function for mime parser that wants to display text
1353  */
1354 void fixed_output(char *name, char *filename, char *partnum, char *disp,
1355                 void *content, char *cbtype, char *cbcharset, size_t length,
1356                 char *encoding, char *cbid, void *cbuserdata)
1357 {
1358         char *ptr;
1359         char *wptr;
1360         size_t wlen;
1361         struct ma_info *ma;
1362
1363         ma = (struct ma_info *)cbuserdata;
1364
1365         syslog(LOG_DEBUG,
1366                 "fixed_output() part %s: %s (%s) (%ld bytes)\n",
1367                 partnum, filename, cbtype, (long)length);
1368
1369         /*
1370          * If we're in the middle of a multipart/alternative scope and
1371          * we've already printed another section, skip this one.
1372          */
1373         if ( (ma->is_ma) && (ma->did_print) ) {
1374                 syslog(LOG_DEBUG, "Skipping part %s (%s)\n", partnum, cbtype);
1375                 return;
1376         }
1377         ma->did_print = 1;
1378
1379         if ( (!strcasecmp(cbtype, "text/plain"))
1380            || (IsEmptyStr(cbtype)) ) {
1381                 wptr = content;
1382                 if (length > 0) {
1383                         client_write(wptr, length);
1384                         if (wptr[length-1] != '\n') {
1385                                 cprintf("\n");
1386                         }
1387                 }
1388                 return;
1389         }
1390
1391         if (!strcasecmp(cbtype, "text/html")) {
1392                 ptr = html_to_ascii(content, length, 80, 0);
1393                 wlen = strlen(ptr);
1394                 client_write(ptr, wlen);
1395                 if ((wlen > 0) && (ptr[wlen-1] != '\n')) {
1396                         cprintf("\n");
1397                 }
1398                 free(ptr);
1399                 return;
1400         }
1401
1402         if (ma->use_fo_hooks) {
1403                 if (PerformFixedOutputHooks(cbtype, content, length)) {
1404                 /* above function returns nonzero if it handled the part */
1405                         return;
1406                 }
1407         }
1408
1409         if (strncasecmp(cbtype, "multipart/", 10)) {
1410                 cprintf("Part %s: %s (%s) (%ld bytes)\r\n",
1411                         partnum, filename, cbtype, (long)length);
1412                 return;
1413         }
1414 }
1415
1416 /*
1417  * The client is elegant and sophisticated and wants to be choosy about
1418  * MIME content types, so figure out which multipart/alternative part
1419  * we're going to send.
1420  *
1421  * We use a system of weights.  When we find a part that matches one of the
1422  * MIME types we've declared as preferential, we can store it in ma->chosen_part
1423  * and then set ma->chosen_pref to that MIME type's position in our preference
1424  * list.  If we then hit another match, we only replace the first match if
1425  * the preference value is lower.
1426  */
1427 void choose_preferred(char *name, char *filename, char *partnum, char *disp,
1428                 void *content, char *cbtype, char *cbcharset, size_t length,
1429                 char *encoding, char *cbid, void *cbuserdata)
1430 {
1431         char buf[1024];
1432         int i;
1433         struct ma_info *ma;
1434
1435         ma = (struct ma_info *)cbuserdata;
1436
1437         // NOTE: REMOVING THIS CONDITIONAL FIXES BUG 220
1438         //       http://bugzilla.citadel.org/show_bug.cgi?id=220
1439         // I don't know if there are any side effects!  Please TEST TEST TEST
1440         //if (ma->is_ma > 0) {
1441
1442         for (i=0; i<num_tokens(CC->preferred_formats, '|'); ++i) {
1443                 extract_token(buf, CC->preferred_formats, i, '|', sizeof buf);
1444                 if ( (!strcasecmp(buf, cbtype)) && (!ma->freeze) ) {
1445                         if (i < ma->chosen_pref) {
1446                                 syslog(LOG_DEBUG, "Setting chosen part: <%s>\n", partnum);
1447                                 safestrncpy(ma->chosen_part, partnum, sizeof ma->chosen_part);
1448                                 ma->chosen_pref = i;
1449                         }
1450                 }
1451         }
1452 }
1453
1454 /*
1455  * Now that we've chosen our preferred part, output it.
1456  */
1457 void output_preferred(char *name,
1458                       char *filename,
1459                       char *partnum,
1460                       char *disp,
1461                       void *content,
1462                       char *cbtype,
1463                       char *cbcharset,
1464                       size_t length,
1465                       char *encoding,
1466                       char *cbid,
1467                       void *cbuserdata)
1468 {
1469         int i;
1470         char buf[128];
1471         int add_newline = 0;
1472         char *text_content;
1473         struct ma_info *ma;
1474         char *decoded = NULL;
1475         size_t bytes_decoded;
1476         int rc = 0;
1477
1478         ma = (struct ma_info *)cbuserdata;
1479
1480         /* This is not the MIME part you're looking for... */
1481         if (strcasecmp(partnum, ma->chosen_part)) return;
1482
1483         /* If the content-type of this part is in our preferred formats
1484          * list, we can simply output it verbatim.
1485          */
1486         for (i=0; i<num_tokens(CC->preferred_formats, '|'); ++i) {
1487                 extract_token(buf, CC->preferred_formats, i, '|', sizeof buf);
1488                 if (!strcasecmp(buf, cbtype)) {
1489                         /* Yeah!  Go!  W00t!! */
1490                         if (ma->dont_decode == 0)
1491                                 rc = mime_decode_now (content,
1492                                                       length,
1493                                                       encoding,
1494                                                       &decoded,
1495                                                       &bytes_decoded);
1496                         if (rc < 0)
1497                                 break; /* Give us the chance, maybe theres another one. */
1498
1499                         if (rc == 0) text_content = (char *)content;
1500                         else {
1501                                 text_content = decoded;
1502                                 length = bytes_decoded;
1503                         }
1504
1505                         if (text_content[length-1] != '\n') {
1506                                 ++add_newline;
1507                         }
1508                         cprintf("Content-type: %s", cbtype);
1509                         if (!IsEmptyStr(cbcharset)) {
1510                                 cprintf("; charset=%s", cbcharset);
1511                         }
1512                         cprintf("\nContent-length: %d\n",
1513                                 (int)(length + add_newline) );
1514                         if (!IsEmptyStr(encoding)) {
1515                                 cprintf("Content-transfer-encoding: %s\n", encoding);
1516                         }
1517                         else {
1518                                 cprintf("Content-transfer-encoding: 7bit\n");
1519                         }
1520                         cprintf("X-Citadel-MSG4-Partnum: %s\n", partnum);
1521                         cprintf("\n");
1522                         if (client_write(text_content, length) == -1)
1523                         {
1524                                 syslog(LOG_ERR, "output_preferred(): aborting due to write failure.\n");
1525                                 return;
1526                         }
1527                         if (add_newline) cprintf("\n");
1528                         if (decoded != NULL) free(decoded);
1529                         return;
1530                 }
1531         }
1532
1533         /* No translations required or possible: output as text/plain */
1534         cprintf("Content-type: text/plain\n\n");
1535         rc = 0;
1536         if (ma->dont_decode == 0)
1537                 rc = mime_decode_now (content,
1538                                       length,
1539                                       encoding,
1540                                       &decoded,
1541                                       &bytes_decoded);
1542         if (rc < 0)
1543                 return; /* Give us the chance, maybe theres another one. */
1544
1545         if (rc == 0) text_content = (char *)content;
1546         else {
1547                 text_content = decoded;
1548                 length = bytes_decoded;
1549         }
1550
1551         fixed_output(name, filename, partnum, disp, text_content, cbtype, cbcharset,
1552                         length, encoding, cbid, cbuserdata);
1553         if (decoded != NULL) free(decoded);
1554 }
1555
1556
1557 struct encapmsg {
1558         char desired_section[64];
1559         char *msg;
1560         size_t msglen;
1561 };
1562
1563
1564 /*
1565  * Callback function for
1566  */
1567 void extract_encapsulated_message(char *name, char *filename, char *partnum, char *disp,
1568                    void *content, char *cbtype, char *cbcharset, size_t length,
1569                    char *encoding, char *cbid, void *cbuserdata)
1570 {
1571         struct encapmsg *encap;
1572
1573         encap = (struct encapmsg *)cbuserdata;
1574
1575         /* Only proceed if this is the desired section... */
1576         if (!strcasecmp(encap->desired_section, partnum)) {
1577                 encap->msglen = length;
1578                 encap->msg = malloc(length + 2);
1579                 memcpy(encap->msg, content, length);
1580                 return;
1581         }
1582 }
1583
1584
1585 /*
1586  * Determine whether the specified message exists in the cached_msglist
1587  * (This is a security check)
1588  */
1589 int check_cached_msglist(long msgnum) {
1590
1591         /* cases in which we skip the check */
1592         if (!CC) return om_ok;                                          /* not a session */
1593         if (CC->client_socket <= 0) return om_ok;                       /* not a client session */
1594         if (CC->cached_msglist == NULL) return om_access_denied;        /* no msglist fetched */
1595         if (CC->cached_num_msgs == 0) return om_access_denied;          /* nothing to check */
1596
1597
1598         /* Do a binary search within the cached_msglist for the requested msgnum */
1599         int min = 0;
1600         int max = (CC->cached_num_msgs - 1);
1601
1602         while (max >= min) {
1603                 int middle = min + (max-min) / 2 ;
1604                 if (msgnum == CC->cached_msglist[middle]) {
1605                         return om_ok;
1606                 }
1607                 if (msgnum > CC->cached_msglist[middle]) {
1608                         min = middle + 1;
1609                 }
1610                 else {
1611                         max = middle - 1;
1612                 }
1613         }
1614
1615         return om_access_denied;
1616 }
1617
1618
1619 /*
1620  * Determine whether the currently logged in session has permission to read
1621  * messages in the current room.
1622  */
1623 int CtdlDoIHavePermissionToReadMessagesInThisRoom(void) {
1624         if (    (!(CC->logged_in))
1625                 && (!(CC->internal_pgm))
1626                 && (!config.c_guest_logins)
1627         ) {
1628                 return(om_not_logged_in);
1629         }
1630         return(om_ok);
1631 }
1632
1633
1634 /*
1635  * Get a message off disk.  (returns om_* values found in msgbase.h)
1636  *
1637  */
1638 int CtdlOutputMsg(long msg_num,         /* message number (local) to fetch */
1639                   int mode,             /* how would you like that message? */
1640                   int headers_only,     /* eschew the message body? */
1641                   int do_proto,         /* do Citadel protocol responses? */
1642                   int crlf,             /* Use CRLF newlines instead of LF? */
1643                   char *section,        /* NULL or a message/rfc822 section */
1644                   int flags             /* various flags; see msgbase.h */
1645 ) {
1646         struct CtdlMessage *TheMessage = NULL;
1647         int retcode = om_no_such_msg;
1648         struct encapmsg encap;
1649         int r;
1650
1651         syslog(LOG_DEBUG, "CtdlOutputMsg(msgnum=%ld, mode=%d, section=%s)\n",
1652                 msg_num, mode,
1653                 (section ? section : "<>")
1654         );
1655
1656         r = CtdlDoIHavePermissionToReadMessagesInThisRoom();
1657         if (r != om_ok) {
1658                 if (do_proto) {
1659                         if (r == om_not_logged_in) {
1660                                 cprintf("%d Not logged in.\n", ERROR + NOT_LOGGED_IN);
1661                         }
1662                         else {
1663                                 cprintf("%d An unknown error has occurred.\n", ERROR);
1664                         }
1665                 }
1666                 return(r);
1667         }
1668
1669         /*
1670          * Check to make sure the message is actually IN this room
1671          */
1672         r = check_cached_msglist(msg_num);
1673         if (r == om_access_denied) {
1674                 /* Not in the cache?  We get ONE shot to check it again. */
1675                 CtdlForEachMessage(MSGS_ALL, 0L, NULL, NULL, NULL, NULL, NULL);
1676                 r = check_cached_msglist(msg_num);
1677         }
1678         if (r != om_ok) {
1679                 syslog(LOG_DEBUG, "Security check fail: message %ld is not in %s\n",
1680                         msg_num, CC->room.QRname
1681                 );
1682                 if (do_proto) {
1683                         if (r == om_access_denied) {
1684                                 cprintf("%d message %ld was not found in this room\n",
1685                                         ERROR + HIGHER_ACCESS_REQUIRED,
1686                                         msg_num
1687                                 );
1688                         }
1689                 }
1690                 return(r);
1691         }
1692
1693         /*
1694          * Fetch the message from disk.  If we're in HEADERS_FAST mode,
1695          * request that we don't even bother loading the body into memory.
1696          */
1697         if (headers_only == HEADERS_FAST) {
1698                 TheMessage = CtdlFetchMessage(msg_num, 0);
1699         }
1700         else {
1701                 TheMessage = CtdlFetchMessage(msg_num, 1);
1702         }
1703
1704         if (TheMessage == NULL) {
1705                 if (do_proto) cprintf("%d Can't locate msg %ld on disk\n",
1706                         ERROR + MESSAGE_NOT_FOUND, msg_num);
1707                 return(om_no_such_msg);
1708         }
1709
1710         /* Here is the weird form of this command, to process only an
1711          * encapsulated message/rfc822 section.
1712          */
1713         if (section) if (!IsEmptyStr(section)) if (strcmp(section, "0")) {
1714                 memset(&encap, 0, sizeof encap);
1715                 safestrncpy(encap.desired_section, section, sizeof encap.desired_section);
1716                 mime_parser(TheMessage->cm_fields['M'],
1717                         NULL,
1718                         *extract_encapsulated_message,
1719                         NULL, NULL, (void *)&encap, 0
1720                 );
1721                 CtdlFreeMessage(TheMessage);
1722                 TheMessage = NULL;
1723
1724                 if (encap.msg) {
1725                         encap.msg[encap.msglen] = 0;
1726                         TheMessage = convert_internet_message(encap.msg);
1727                         encap.msg = NULL;       /* no free() here, TheMessage owns it now */
1728
1729                         /* Now we let it fall through to the bottom of this
1730                          * function, because TheMessage now contains the
1731                          * encapsulated message instead of the top-level
1732                          * message.  Isn't that neat?
1733                          */
1734
1735                 }
1736                 else {
1737                         if (do_proto) cprintf("%d msg %ld has no part %s\n",
1738                                 ERROR + MESSAGE_NOT_FOUND, msg_num, section);
1739                         retcode = om_no_such_msg;
1740                 }
1741
1742         }
1743
1744         /* Ok, output the message now */
1745         retcode = CtdlOutputPreLoadedMsg(TheMessage, mode, headers_only, do_proto, crlf, flags);
1746         CtdlFreeMessage(TheMessage);
1747
1748         return(retcode);
1749 }
1750
1751
1752 char *qp_encode_email_addrs(char *source)
1753 {
1754         char *user, *node, *name;
1755         const char headerStr[] = "=?UTF-8?Q?";
1756         char *Encoded;
1757         char *EncodedName;
1758         char *nPtr;
1759         int need_to_encode = 0;
1760         long SourceLen;
1761         long EncodedMaxLen;
1762         long nColons = 0;
1763         long *AddrPtr;
1764         long *AddrUtf8;
1765         long nAddrPtrMax = 50;
1766         long nmax;
1767         int InQuotes = 0;
1768         int i, n;
1769
1770         if (source == NULL) return source;
1771         if (IsEmptyStr(source)) return source;
1772         cit_backtrace();
1773         syslog(LOG_DEBUG, "qp_encode_email_addrs: [%s]\n", source);
1774
1775         AddrPtr = malloc (sizeof (long) * nAddrPtrMax);
1776         AddrUtf8 = malloc (sizeof (long) * nAddrPtrMax);
1777         memset(AddrUtf8, 0, sizeof (long) * nAddrPtrMax);
1778         *AddrPtr = 0;
1779         i = 0;
1780         while (!IsEmptyStr (&source[i])) {
1781                 if (nColons >= nAddrPtrMax){
1782                         long *ptr;
1783
1784                         ptr = (long *) malloc(sizeof (long) * nAddrPtrMax * 2);
1785                         memcpy (ptr, AddrPtr, sizeof (long) * nAddrPtrMax);
1786                         free (AddrPtr), AddrPtr = ptr;
1787
1788                         ptr = (long *) malloc(sizeof (long) * nAddrPtrMax * 2);
1789                         memset(&ptr[nAddrPtrMax], 0,
1790                                sizeof (long) * nAddrPtrMax);
1791
1792                         memcpy (ptr, AddrUtf8, sizeof (long) * nAddrPtrMax);
1793                         free (AddrUtf8), AddrUtf8 = ptr;
1794                         nAddrPtrMax *= 2;
1795                 }
1796                 if (((unsigned char) source[i] < 32) ||
1797                     ((unsigned char) source[i] > 126)) {
1798                         need_to_encode = 1;
1799                         AddrUtf8[nColons] = 1;
1800                 }
1801                 if (source[i] == '"')
1802                         InQuotes = !InQuotes;
1803                 if (!InQuotes && source[i] == ',') {
1804                         AddrPtr[nColons] = i;
1805                         nColons++;
1806                 }
1807                 i++;
1808         }
1809         if (need_to_encode == 0) {
1810                 free(AddrPtr);
1811                 free(AddrUtf8);
1812                 return source;
1813         }
1814
1815         SourceLen = i;
1816         EncodedMaxLen = nColons * (sizeof(headerStr) + 3) + SourceLen * 3;
1817         Encoded = (char*) malloc (EncodedMaxLen);
1818
1819         for (i = 0; i < nColons; i++)
1820                 source[AddrPtr[i]++] = '\0';
1821         /* TODO: if libidn, this might get larger*/
1822         user = malloc(SourceLen + 1);
1823         node = malloc(SourceLen + 1);
1824         name = malloc(SourceLen + 1);
1825
1826         nPtr = Encoded;
1827         *nPtr = '\0';
1828         for (i = 0; i < nColons && nPtr != NULL; i++) {
1829                 nmax = EncodedMaxLen - (nPtr - Encoded);
1830                 if (AddrUtf8[i]) {
1831                         process_rfc822_addr(&source[AddrPtr[i]],
1832                                             user,
1833                                             node,
1834                                             name);
1835                         /* TODO: libIDN here ! */
1836                         if (IsEmptyStr(name)) {
1837                                 n = snprintf(nPtr, nmax,
1838                                              (i==0)?"%s@%s" : ",%s@%s",
1839                                              user, node);
1840                         }
1841                         else {
1842                                 EncodedName = rfc2047encode(name, strlen(name));
1843                                 n = snprintf(nPtr, nmax,
1844                                              (i==0)?"%s <%s@%s>" : ",%s <%s@%s>",
1845                                              EncodedName, user, node);
1846                                 free(EncodedName);
1847                         }
1848                 }
1849                 else {
1850                         n = snprintf(nPtr, nmax,
1851                                      (i==0)?"%s" : ",%s",
1852                                      &source[AddrPtr[i]]);
1853                 }
1854                 if (n > 0 )
1855                         nPtr += n;
1856                 else {
1857                         char *ptr, *nnPtr;
1858                         ptr = (char*) malloc(EncodedMaxLen * 2);
1859                         memcpy(ptr, Encoded, EncodedMaxLen);
1860                         nnPtr = ptr + (nPtr - Encoded), nPtr = nnPtr;
1861                         free(Encoded), Encoded = ptr;
1862                         EncodedMaxLen *= 2;
1863                         i--; /* do it once more with properly lengthened buffer */
1864                 }
1865         }
1866         for (i = 0; i < nColons; i++)
1867                 source[--AddrPtr[i]] = ',';
1868
1869         free(user);
1870         free(node);
1871         free(name);
1872         free(AddrUtf8);
1873         free(AddrPtr);
1874         return Encoded;
1875 }
1876
1877
1878 /* If the last item in a list of recipients was truncated to a partial address,
1879  * remove it completely in order to avoid choking libSieve
1880  */
1881 void sanitize_truncated_recipient(char *str)
1882 {
1883         if (!str) return;
1884         if (num_tokens(str, ',') < 2) return;
1885
1886         int len = strlen(str);
1887         if (len < 900) return;
1888         if (len > 998) str[998] = 0;
1889
1890         char *cptr = strrchr(str, ',');
1891         if (!cptr) return;
1892
1893         char *lptr = strchr(cptr, '<');
1894         char *rptr = strchr(cptr, '>');
1895
1896         if ( (lptr) && (rptr) && (rptr > lptr) ) return;
1897
1898         *cptr = 0;
1899 }
1900
1901
1902 void OutputCtdlMsgHeaders(
1903         struct CtdlMessage *TheMessage,
1904         int do_proto)           /* do Citadel protocol responses? */
1905 {
1906         char allkeys[30];
1907         int i, k, n;
1908         int suppress_f = 0;
1909         char buf[SIZ];
1910         char display_name[256];
1911
1912         /* begin header processing loop for Citadel message format */
1913         safestrncpy(display_name, "<unknown>", sizeof display_name);
1914         if (TheMessage->cm_fields['A']) {
1915                 strcpy(buf, TheMessage->cm_fields['A']);
1916                 if (TheMessage->cm_anon_type == MES_ANONONLY) {
1917                         safestrncpy(display_name, "****", sizeof display_name);
1918                 }
1919                 else if (TheMessage->cm_anon_type == MES_ANONOPT) {
1920                         safestrncpy(display_name, "anonymous", sizeof display_name);
1921                 }
1922                 else {
1923                         safestrncpy(display_name, buf, sizeof display_name);
1924                 }
1925                 if ((is_room_aide())
1926                     && ((TheMessage->cm_anon_type == MES_ANONONLY)
1927                         || (TheMessage->cm_anon_type == MES_ANONOPT))) {
1928                         size_t tmp = strlen(display_name);
1929                         snprintf(&display_name[tmp],
1930                                  sizeof display_name - tmp,
1931                                  " [%s]", buf);
1932                 }
1933         }
1934
1935         /* Don't show Internet address for users on the
1936          * local Citadel network.
1937          */
1938         suppress_f = 0;
1939         if (TheMessage->cm_fields['N'] != NULL)
1940                 if (!IsEmptyStr(TheMessage->cm_fields['N']))
1941                         if (haschar(TheMessage->cm_fields['N'], '.') == 0) {
1942                                 suppress_f = 1;
1943                         }
1944
1945         /* Now spew the header fields in the order we like them. */
1946         n = safestrncpy(allkeys, FORDER, sizeof allkeys);
1947         for (i=0; i<n; ++i) {
1948                 k = (int) allkeys[i];
1949                 if (k != 'M') {
1950                         if ( (TheMessage->cm_fields[k] != NULL)
1951                              && (msgkeys[k] != NULL) ) {
1952                                 if ((k == 'V') || (k == 'R') || (k == 'Y')) {
1953                                         sanitize_truncated_recipient(TheMessage->cm_fields[k]);
1954                                 }
1955                                 if (k == 'A') {
1956                                         if (do_proto) cprintf("%s=%s\n",
1957                                                               msgkeys[k],
1958                                                               display_name);
1959                                 }
1960                                 else if ((k == 'F') && (suppress_f)) {
1961                                         /* do nothing */
1962                                 }
1963                                 /* Masquerade display name if needed */
1964                                 else {
1965                                         if (do_proto) cprintf("%s=%s\n",
1966                                                               msgkeys[k],
1967                                                               TheMessage->cm_fields[k]
1968                                                 );
1969                                 }
1970                         }
1971                 }
1972         }
1973
1974 }
1975
1976 void OutputRFC822MsgHeaders(
1977         struct CtdlMessage *TheMessage,
1978         int flags,              /* should the bessage be exported clean */
1979         const char *nl,
1980         char *mid, long sizeof_mid,
1981         char *suser, long sizeof_suser,
1982         char *luser, long sizeof_luser,
1983         char *fuser, long sizeof_fuser,
1984         char *snode, long sizeof_snode)
1985 {
1986         char datestamp[100];
1987         int subject_found = 0;
1988         char buf[SIZ];
1989         int i, j, k;
1990         char *mptr = NULL;
1991         char *mpptr = NULL;
1992         char *hptr;
1993
1994         for (i = 0; i < 256; ++i) {
1995                 if (TheMessage->cm_fields[i]) {
1996                         mptr = mpptr = TheMessage->cm_fields[i];
1997
1998                         if (i == 'A') {
1999                                 safestrncpy(luser, mptr, sizeof_luser);
2000                                 safestrncpy(suser, mptr, sizeof_suser);
2001                         }
2002                         else if (i == 'Y') {
2003                                 if ((flags & QP_EADDR) != 0) {
2004                                         mptr = qp_encode_email_addrs(mptr);
2005                                 }
2006                                 sanitize_truncated_recipient(mptr);
2007                                 cprintf("CC: %s%s", mptr, nl);
2008                         }
2009                         else if (i == 'P') {
2010                                 cprintf("Return-Path: %s%s", mptr, nl);
2011                         }
2012                         else if (i == 'L') {
2013                                 cprintf("List-ID: %s%s", mptr, nl);
2014                         }
2015                         else if (i == 'V') {
2016                                 if ((flags & QP_EADDR) != 0)
2017                                         mptr = qp_encode_email_addrs(mptr);
2018                                 hptr = mptr;
2019                                 while ((*hptr != '\0') && isspace(*hptr))
2020                                         hptr ++;
2021                                 if (!IsEmptyStr(hptr))
2022                                         cprintf("Envelope-To: %s%s", hptr, nl);
2023                         }
2024                         else if (i == 'U') {
2025                                 cprintf("Subject: %s%s", mptr, nl);
2026                                 subject_found = 1;
2027                         }
2028                         else if (i == 'I')
2029                                 safestrncpy(mid, mptr, sizeof_mid); /// TODO: detect @ here and copy @nodename in if not found.
2030                         else if (i == 'F')
2031                                 safestrncpy(fuser, mptr, sizeof_fuser);
2032                         /* else if (i == 'O')
2033                            cprintf("X-Citadel-Room: %s%s",
2034                            mptr, nl); */
2035                         else if (i == 'N')
2036                                 safestrncpy(snode, mptr, sizeof_snode);
2037                         else if (i == 'R')
2038                         {
2039                                 if (haschar(mptr, '@') == 0)
2040                                 {
2041                                         sanitize_truncated_recipient(mptr);
2042                                         cprintf("To: %s@%s", mptr, config.c_fqdn);
2043                                         cprintf("%s", nl);
2044                                 }
2045                                 else
2046                                 {
2047                                         if ((flags & QP_EADDR) != 0) {
2048                                                 mptr = qp_encode_email_addrs(mptr);
2049                                         }
2050                                         sanitize_truncated_recipient(mptr);
2051                                         cprintf("To: %s", mptr);
2052                                         cprintf("%s", nl);
2053                                 }
2054                         }
2055                         else if (i == 'T') {
2056                                 datestring(datestamp, sizeof datestamp,
2057                                            atol(mptr), DATESTRING_RFC822);
2058                                 cprintf("Date: %s%s", datestamp, nl);
2059                         }
2060                         else if (i == 'W') {
2061                                 cprintf("References: ");
2062                                 k = num_tokens(mptr, '|');
2063                                 for (j=0; j<k; ++j) {
2064                                         extract_token(buf, mptr, j, '|', sizeof buf);
2065                                         cprintf("<%s>", buf);
2066                                         if (j == (k-1)) {
2067                                                 cprintf("%s", nl);
2068                                         }
2069                                         else {
2070                                                 cprintf(" ");
2071                                         }
2072                                 }
2073                         }
2074                         else if (i == 'K') {
2075                                 hptr = mptr;
2076                                 while ((*hptr != '\0') && isspace(*hptr))
2077                                         hptr ++;
2078                                 if (!IsEmptyStr(hptr))
2079                                         cprintf("Reply-To: %s%s", mptr, nl);
2080                         }
2081                         if (mptr != mpptr)
2082                                 free (mptr);
2083                 }
2084         }
2085         if (subject_found == 0) {
2086                 cprintf("Subject: (no subject)%s", nl);
2087         }
2088 }
2089
2090
2091 void Dump_RFC822HeadersBody(
2092         struct CtdlMessage *TheMessage,
2093         int headers_only,       /* eschew the message body? */
2094         int flags,              /* should the bessage be exported clean? */
2095
2096         const char *nl)
2097 {
2098         cit_uint8_t prev_ch;
2099         int eoh = 0;
2100         const char *StartOfText = StrBufNOTNULL;
2101         char outbuf[1024];
2102         int outlen = 0;
2103         int nllen = strlen(nl);
2104         char *mptr;
2105
2106         mptr = TheMessage->cm_fields['M'];
2107
2108
2109         prev_ch = '\0';
2110         while (*mptr != '\0') {
2111                 if (*mptr == '\r') {
2112                         /* do nothing */
2113                 }
2114                 else {
2115                         if ((!eoh) &&
2116                             (*mptr == '\n'))
2117                         {
2118                                 eoh = (*(mptr+1) == '\r') && (*(mptr+2) == '\n');
2119                                 if (!eoh)
2120                                         eoh = *(mptr+1) == '\n';
2121                                 if (eoh)
2122                                 {
2123                                         StartOfText = mptr;
2124                                         StartOfText = strchr(StartOfText, '\n');
2125                                         StartOfText = strchr(StartOfText, '\n');
2126                                 }
2127                         }
2128                         if (((headers_only == HEADERS_NONE) && (mptr >= StartOfText)) ||
2129                             ((headers_only == HEADERS_ONLY) && (mptr < StartOfText)) ||
2130                             ((headers_only != HEADERS_NONE) &&
2131                              (headers_only != HEADERS_ONLY))
2132                                 ) {
2133                                 if (*mptr == '\n') {
2134                                         memcpy(&outbuf[outlen], nl, nllen);
2135                                         outlen += nllen;
2136                                         outbuf[outlen] = '\0';
2137                                 }
2138                                 else {
2139                                         outbuf[outlen++] = *mptr;
2140                                 }
2141                         }
2142                 }
2143                 if (flags & ESC_DOT)
2144                 {
2145                         if ((prev_ch == '\n') &&
2146                             (*mptr == '.') &&
2147                             ((*(mptr+1) == '\r') || (*(mptr+1) == '\n')))
2148                         {
2149                                 outbuf[outlen++] = '.';
2150                         }
2151                         prev_ch = *mptr;
2152                 }
2153                 ++mptr;
2154                 if (outlen > 1000) {
2155                         if (client_write(outbuf, outlen) == -1)
2156                         {
2157                                 syslog(LOG_ERR, "Dump_RFC822HeadersBody(): aborting due to write failure.\n");
2158                                 return;
2159                         }
2160                         outlen = 0;
2161                 }
2162         }
2163         if (outlen > 0) {
2164                 client_write(outbuf, outlen);
2165                 outlen = 0;
2166         }
2167 }
2168
2169
2170
2171 /* If the format type on disk is 1 (fixed-format), then we want
2172  * everything to be output completely literally ... regardless of
2173  * what message transfer format is in use.
2174  */
2175 void DumpFormatFixed(
2176         struct CtdlMessage *TheMessage,
2177         int mode,               /* how would you like that message? */
2178         const char *nl)
2179 {
2180         cit_uint8_t ch;
2181         char buf[SIZ];
2182         int buflen;
2183         int xlline = 0;
2184         int nllen = strlen (nl);
2185         char *mptr;
2186
2187         mptr = TheMessage->cm_fields['M'];
2188
2189         if (mode == MT_MIME) {
2190                 cprintf("Content-type: text/plain\n\n");
2191         }
2192         *buf = '\0';
2193         buflen = 0;
2194         while (ch = *mptr++, ch > 0) {
2195                 if (ch == '\n')
2196                         ch = '\r';
2197
2198                 if ((buflen > 250) && (!xlline)){
2199                         int tbuflen;
2200                         tbuflen = buflen;
2201
2202                         while ((buflen > 0) &&
2203                                (!isspace(buf[buflen])))
2204                                 buflen --;
2205                         if (buflen == 0) {
2206                                 xlline = 1;
2207                         }
2208                         else {
2209                                 mptr -= tbuflen - buflen;
2210                                 buf[buflen] = '\0';
2211                                 ch = '\r';
2212                         }
2213                 }
2214                 /* if we reach the outer bounds of our buffer,
2215                    abort without respect what whe purge. */
2216                 if (xlline &&
2217                     ((isspace(ch)) ||
2218                      (buflen > SIZ - nllen - 2)))
2219                         ch = '\r';
2220
2221                 if (ch == '\r') {
2222                         memcpy (&buf[buflen], nl, nllen);
2223                         buflen += nllen;
2224                         buf[buflen] = '\0';
2225
2226                         if (client_write(buf, buflen) == -1)
2227                         {
2228                                 syslog(LOG_ERR, "DumpFormatFixed(): aborting due to write failure.\n");
2229                                 return;
2230                         }
2231                         *buf = '\0';
2232                         buflen = 0;
2233                         xlline = 0;
2234                 } else {
2235                         buf[buflen] = ch;
2236                         buflen++;
2237                 }
2238         }
2239         buf[buflen] = '\0';
2240         if (!IsEmptyStr(buf))
2241                 cprintf("%s%s", buf, nl);
2242 }
2243
2244 /*
2245  * Get a message off disk.  (returns om_* values found in msgbase.h)
2246  */
2247 int CtdlOutputPreLoadedMsg(
2248                 struct CtdlMessage *TheMessage,
2249                 int mode,               /* how would you like that message? */
2250                 int headers_only,       /* eschew the message body? */
2251                 int do_proto,           /* do Citadel protocol responses? */
2252                 int crlf,               /* Use CRLF newlines instead of LF? */
2253                 int flags               /* should the bessage be exported clean? */
2254 ) {
2255         int i;
2256         char *mptr = NULL;
2257         const char *nl; /* newline string */
2258         struct ma_info ma;
2259
2260         /* Buffers needed for RFC822 translation.  These are all filled
2261          * using functions that are bounds-checked, and therefore we can
2262          * make them substantially smaller than SIZ.
2263          */
2264         char suser[100];
2265         char luser[100];
2266         char fuser[100];
2267         char snode[100];
2268         char mid[100];
2269
2270         syslog(LOG_DEBUG, "CtdlOutputPreLoadedMsg(TheMessage=%s, %d, %d, %d, %d\n",
2271                 ((TheMessage == NULL) ? "NULL" : "not null"),
2272                 mode, headers_only, do_proto, crlf);
2273
2274         strcpy(mid, "unknown");
2275         nl = (crlf ? "\r\n" : "\n");
2276
2277         if (!is_valid_message(TheMessage)) {
2278                 syslog(LOG_ERR,
2279                         "ERROR: invalid preloaded message for output\n");
2280                 cit_backtrace ();
2281                 return(om_no_such_msg);
2282         }
2283
2284         /* Suppress envelope recipients if required to avoid disclosing BCC addresses.
2285          * Pad it with spaces in order to avoid changing the RFC822 length of the message.
2286          */
2287         if ( (flags & SUPPRESS_ENV_TO) && (TheMessage->cm_fields['V'] != NULL) ) {
2288                 memset(TheMessage->cm_fields['V'], ' ', strlen(TheMessage->cm_fields['V']));
2289         }
2290
2291         /* Are we downloading a MIME component? */
2292         if (mode == MT_DOWNLOAD) {
2293                 if (TheMessage->cm_format_type != FMT_RFC822) {
2294                         if (do_proto)
2295                                 cprintf("%d This is not a MIME message.\n",
2296                                 ERROR + ILLEGAL_VALUE);
2297                 } else if (CC->download_fp != NULL) {
2298                         if (do_proto) cprintf(
2299                                 "%d You already have a download open.\n",
2300                                 ERROR + RESOURCE_BUSY);
2301                 } else {
2302                         /* Parse the message text component */
2303                         mptr = TheMessage->cm_fields['M'];
2304                         mime_parser(mptr, NULL, *mime_download, NULL, NULL, NULL, 0);
2305                         /* If there's no file open by this time, the requested
2306                          * section wasn't found, so print an error
2307                          */
2308                         if (CC->download_fp == NULL) {
2309                                 if (do_proto) cprintf(
2310                                         "%d Section %s not found.\n",
2311                                         ERROR + FILE_NOT_FOUND,
2312                                         CC->download_desired_section);
2313                         }
2314                 }
2315                 return((CC->download_fp != NULL) ? om_ok : om_mime_error);
2316         }
2317
2318         /* MT_SPEW_SECTION is like MT_DOWNLOAD except it outputs the whole MIME part
2319          * in a single server operation instead of opening a download file.
2320          */
2321         if (mode == MT_SPEW_SECTION) {
2322                 if (TheMessage->cm_format_type != FMT_RFC822) {
2323                         if (do_proto)
2324                                 cprintf("%d This is not a MIME message.\n",
2325                                 ERROR + ILLEGAL_VALUE);
2326                 } else {
2327                         /* Parse the message text component */
2328                         int found_it = 0;
2329
2330                         mptr = TheMessage->cm_fields['M'];
2331                         mime_parser(mptr, NULL, *mime_spew_section, NULL, NULL, (void *)&found_it, 0);
2332                         /* If section wasn't found, print an error
2333                          */
2334                         if (!found_it) {
2335                                 if (do_proto) cprintf(
2336                                         "%d Section %s not found.\n",
2337                                         ERROR + FILE_NOT_FOUND,
2338                                         CC->download_desired_section);
2339                         }
2340                 }
2341                 return((CC->download_fp != NULL) ? om_ok : om_mime_error);
2342         }
2343
2344         /* now for the user-mode message reading loops */
2345         if (do_proto) cprintf("%d msg:\n", LISTING_FOLLOWS);
2346
2347         /* Does the caller want to skip the headers? */
2348         if (headers_only == HEADERS_NONE) goto START_TEXT;
2349
2350         /* Tell the client which format type we're using. */
2351         if ( (mode == MT_CITADEL) && (do_proto) ) {
2352                 cprintf("type=%d\n", TheMessage->cm_format_type);
2353         }
2354
2355         /* nhdr=yes means that we're only displaying headers, no body */
2356         if ( (TheMessage->cm_anon_type == MES_ANONONLY)
2357            && ((mode == MT_CITADEL) || (mode == MT_MIME))
2358            && (do_proto)
2359            ) {
2360                 cprintf("nhdr=yes\n");
2361         }
2362
2363         if ((mode == MT_CITADEL) || (mode == MT_MIME))
2364                 OutputCtdlMsgHeaders(TheMessage, do_proto);
2365
2366
2367         /* begin header processing loop for RFC822 transfer format */
2368         strcpy(suser, "");
2369         strcpy(luser, "");
2370         strcpy(fuser, "");
2371         strcpy(snode, NODENAME);
2372         if (mode == MT_RFC822)
2373                 OutputRFC822MsgHeaders(
2374                         TheMessage,
2375                         flags,
2376                         nl,
2377                         mid, sizeof(mid),
2378                         suser, sizeof(suser),
2379                         luser, sizeof(luser),
2380                         fuser, sizeof(fuser),
2381                         snode, sizeof(snode)
2382                         );
2383
2384
2385         for (i=0; !IsEmptyStr(&suser[i]); ++i) {
2386                 suser[i] = tolower(suser[i]);
2387                 if (!isalnum(suser[i])) suser[i]='_';
2388         }
2389
2390         if (mode == MT_RFC822) {
2391                 if (!strcasecmp(snode, NODENAME)) {
2392                         safestrncpy(snode, FQDN, sizeof snode);
2393                 }
2394
2395                 /* Construct a fun message id */
2396                 cprintf("Message-ID: <%s", mid);/// todo: this possibly breaks threadding mails.
2397                 if (strchr(mid, '@')==NULL) {
2398                         cprintf("@%s", snode);
2399                 }
2400                 cprintf(">%s", nl);
2401
2402                 if (!is_room_aide() && (TheMessage->cm_anon_type == MES_ANONONLY)) {
2403                         cprintf("From: \"----\" <x@x.org>%s", nl);
2404                 }
2405                 else if (!is_room_aide() && (TheMessage->cm_anon_type == MES_ANONOPT)) {
2406                         cprintf("From: \"anonymous\" <x@x.org>%s", nl);
2407                 }
2408                 else if (!IsEmptyStr(fuser)) {
2409                         cprintf("From: \"%s\" <%s>%s", luser, fuser, nl);
2410                 }
2411                 else {
2412                         cprintf("From: \"%s\" <%s@%s>%s", luser, suser, snode, nl);
2413                 }
2414
2415                 /* Blank line signifying RFC822 end-of-headers */
2416                 if (TheMessage->cm_format_type != FMT_RFC822) {
2417                         cprintf("%s", nl);
2418                 }
2419         }
2420
2421         /* end header processing loop ... at this point, we're in the text */
2422 START_TEXT:
2423         if (headers_only == HEADERS_FAST) goto DONE;
2424
2425         /* Tell the client about the MIME parts in this message */
2426         if (TheMessage->cm_format_type == FMT_RFC822) {
2427                 if ( (mode == MT_CITADEL) || (mode == MT_MIME) ) {
2428                         mptr = TheMessage->cm_fields['M'];
2429                         memset(&ma, 0, sizeof(struct ma_info));
2430                         mime_parser(mptr, NULL,
2431                                 (do_proto ? *list_this_part : NULL),
2432                                 (do_proto ? *list_this_pref : NULL),
2433                                 (do_proto ? *list_this_suff : NULL),
2434                                 (void *)&ma, 1);
2435                 }
2436                 else if (mode == MT_RFC822) {   /* unparsed RFC822 dump */
2437                         Dump_RFC822HeadersBody(
2438                                 TheMessage,
2439                                 headers_only,
2440                                 flags,
2441                                 nl);
2442                         goto DONE;
2443                 }
2444         }
2445
2446         if (headers_only == HEADERS_ONLY) {
2447                 goto DONE;
2448         }
2449
2450         /* signify start of msg text */
2451         if ( (mode == MT_CITADEL) || (mode == MT_MIME) ) {
2452                 if (do_proto) cprintf("text\n");
2453         }
2454
2455         if (TheMessage->cm_format_type == FMT_FIXED)
2456                 DumpFormatFixed(
2457                         TheMessage,
2458                         mode,           /* how would you like that message? */
2459                         nl);
2460
2461         /* If the message on disk is format 0 (Citadel vari-format), we
2462          * output using the formatter at 80 columns.  This is the final output
2463          * form if the transfer format is RFC822, but if the transfer format
2464          * is Citadel proprietary, it'll still work, because the indentation
2465          * for new paragraphs is correct and the client will reformat the
2466          * message to the reader's screen width.
2467          */
2468         if (TheMessage->cm_format_type == FMT_CITADEL) {
2469                 mptr = TheMessage->cm_fields['M'];
2470
2471                 if (mode == MT_MIME) {
2472                         cprintf("Content-type: text/x-citadel-variformat\n\n");
2473                 }
2474                 memfmout(mptr, nl);
2475         }
2476
2477         /* If the message on disk is format 4 (MIME), we've gotta hand it
2478          * off to the MIME parser.  The client has already been told that
2479          * this message is format 1 (fixed format), so the callback function
2480          * we use will display those parts as-is.
2481          */
2482         if (TheMessage->cm_format_type == FMT_RFC822) {
2483                 memset(&ma, 0, sizeof(struct ma_info));
2484
2485                 if (mode == MT_MIME) {
2486                         ma.use_fo_hooks = 0;
2487                         strcpy(ma.chosen_part, "1");
2488                         ma.chosen_pref = 9999;
2489                         ma.dont_decode = CC->msg4_dont_decode;
2490                         mime_parser(mptr, NULL,
2491                                 *choose_preferred, *fixed_output_pre,
2492                                 *fixed_output_post, (void *)&ma, 1);
2493                         mime_parser(mptr, NULL,
2494                                 *output_preferred, NULL, NULL, (void *)&ma, 1);
2495                 }
2496                 else {
2497                         ma.use_fo_hooks = 1;
2498                         mime_parser(mptr, NULL,
2499                                 *fixed_output, *fixed_output_pre,
2500                                 *fixed_output_post, (void *)&ma, 0);
2501                 }
2502
2503         }
2504
2505 DONE:   /* now we're done */
2506         if (do_proto) cprintf("000\n");
2507         return(om_ok);
2508 }
2509
2510
2511 /*
2512  * display a message (mode 0 - Citadel proprietary)
2513  */
2514 void cmd_msg0(char *cmdbuf)
2515 {
2516         long msgid;
2517         int headers_only = HEADERS_ALL;
2518
2519         msgid = extract_long(cmdbuf, 0);
2520         headers_only = extract_int(cmdbuf, 1);
2521
2522         CtdlOutputMsg(msgid, MT_CITADEL, headers_only, 1, 0, NULL, 0);
2523         return;
2524 }
2525
2526
2527 /*
2528  * display a message (mode 2 - RFC822)
2529  */
2530 void cmd_msg2(char *cmdbuf)
2531 {
2532         long msgid;
2533         int headers_only = HEADERS_ALL;
2534
2535         msgid = extract_long(cmdbuf, 0);
2536         headers_only = extract_int(cmdbuf, 1);
2537
2538         CtdlOutputMsg(msgid, MT_RFC822, headers_only, 1, 1, NULL, 0);
2539 }
2540
2541
2542
2543 /*
2544  * display a message (mode 3 - IGnet raw format - internal programs only)
2545  */
2546 void cmd_msg3(char *cmdbuf)
2547 {
2548         long msgnum;
2549         struct CtdlMessage *msg = NULL;
2550         struct ser_ret smr;
2551
2552         if (CC->internal_pgm == 0) {
2553                 cprintf("%d This command is for internal programs only.\n",
2554                         ERROR + HIGHER_ACCESS_REQUIRED);
2555                 return;
2556         }
2557
2558         msgnum = extract_long(cmdbuf, 0);
2559         msg = CtdlFetchMessage(msgnum, 1);
2560         if (msg == NULL) {
2561                 cprintf("%d Message %ld not found.\n",
2562                         ERROR + MESSAGE_NOT_FOUND, msgnum);
2563                 return;
2564         }
2565
2566         serialize_message(&smr, msg);
2567         CtdlFreeMessage(msg);
2568
2569         if (smr.len == 0) {
2570                 cprintf("%d Unable to serialize message\n",
2571                         ERROR + INTERNAL_ERROR);
2572                 return;
2573         }
2574
2575         cprintf("%d %ld\n", BINARY_FOLLOWS, (long)smr.len);
2576         client_write((char *)smr.ser, (int)smr.len);
2577         free(smr.ser);
2578 }
2579
2580
2581
2582 /*
2583  * Display a message using MIME content types
2584  */
2585 void cmd_msg4(char *cmdbuf)
2586 {
2587         long msgid;
2588         char section[64];
2589
2590         msgid = extract_long(cmdbuf, 0);
2591         extract_token(section, cmdbuf, 1, '|', sizeof section);
2592         CtdlOutputMsg(msgid, MT_MIME, 0, 1, 0, (section[0] ? section : NULL) , 0);
2593 }
2594
2595
2596
2597 /*
2598  * Client tells us its preferred message format(s)
2599  */
2600 void cmd_msgp(char *cmdbuf)
2601 {
2602         if (!strcasecmp(cmdbuf, "dont_decode")) {
2603                 CC->msg4_dont_decode = 1;
2604                 cprintf("%d MSG4 will not pre-decode messages.\n", CIT_OK);
2605         }
2606         else {
2607                 safestrncpy(CC->preferred_formats, cmdbuf, sizeof(CC->preferred_formats));
2608                 cprintf("%d Preferred MIME formats have been set.\n", CIT_OK);
2609         }
2610 }
2611
2612
2613 /*
2614  * Open a component of a MIME message as a download file
2615  */
2616 void cmd_opna(char *cmdbuf)
2617 {
2618         long msgid;
2619         char desired_section[128];
2620
2621         msgid = extract_long(cmdbuf, 0);
2622         extract_token(desired_section, cmdbuf, 1, '|', sizeof desired_section);
2623         safestrncpy(CC->download_desired_section, desired_section,
2624                 sizeof CC->download_desired_section);
2625         CtdlOutputMsg(msgid, MT_DOWNLOAD, 0, 1, 1, NULL, 0);
2626 }
2627
2628
2629 /*
2630  * Open a component of a MIME message and transmit it all at once
2631  */
2632 void cmd_dlat(char *cmdbuf)
2633 {
2634         long msgid;
2635         char desired_section[128];
2636
2637         msgid = extract_long(cmdbuf, 0);
2638         extract_token(desired_section, cmdbuf, 1, '|', sizeof desired_section);
2639         safestrncpy(CC->download_desired_section, desired_section,
2640                 sizeof CC->download_desired_section);
2641         CtdlOutputMsg(msgid, MT_SPEW_SECTION, 0, 1, 1, NULL, 0);
2642 }
2643
2644
2645 /*
2646  * Save one or more message pointers into a specified room
2647  * (Returns 0 for success, nonzero for failure)
2648  * roomname may be NULL to use the current room
2649  *
2650  * Note that the 'supplied_msg' field may be set to NULL, in which case
2651  * the message will be fetched from disk, by number, if we need to perform
2652  * replication checks.  This adds an additional database read, so if the
2653  * caller already has the message in memory then it should be supplied.  (Obviously
2654  * this mode of operation only works if we're saving a single message.)
2655  */
2656 int CtdlSaveMsgPointersInRoom(char *roomname, long newmsgidlist[], int num_newmsgs,
2657                         int do_repl_check, struct CtdlMessage *supplied_msg, int suppress_refcount_adj
2658 ) {
2659         int i, j, unique;
2660         char hold_rm[ROOMNAMELEN];
2661         struct cdbdata *cdbfr;
2662         int num_msgs;
2663         long *msglist;
2664         long highest_msg = 0L;
2665
2666         long msgid = 0;
2667         struct CtdlMessage *msg = NULL;
2668
2669         long *msgs_to_be_merged = NULL;
2670         int num_msgs_to_be_merged = 0;
2671
2672         syslog(LOG_DEBUG,
2673                 "CtdlSaveMsgPointersInRoom(room=%s, num_msgs=%d, repl=%d, suppress_rca=%d)\n",
2674                 roomname, num_newmsgs, do_repl_check, suppress_refcount_adj
2675         );
2676
2677         strcpy(hold_rm, CC->room.QRname);
2678
2679         /* Sanity checks */
2680         if (newmsgidlist == NULL) return(ERROR + INTERNAL_ERROR);
2681         if (num_newmsgs < 1) return(ERROR + INTERNAL_ERROR);
2682         if (num_newmsgs > 1) supplied_msg = NULL;
2683
2684         /* Now the regular stuff */
2685         if (CtdlGetRoomLock(&CC->room,
2686            ((roomname != NULL) ? roomname : CC->room.QRname) )
2687            != 0) {
2688                 syslog(LOG_ERR, "No such room <%s>\n", roomname);
2689                 return(ERROR + ROOM_NOT_FOUND);
2690         }
2691
2692
2693         msgs_to_be_merged = malloc(sizeof(long) * num_newmsgs);
2694         num_msgs_to_be_merged = 0;
2695
2696
2697         cdbfr = cdb_fetch(CDB_MSGLISTS, &CC->room.QRnumber, sizeof(long));
2698         if (cdbfr == NULL) {
2699                 msglist = NULL;
2700                 num_msgs = 0;
2701         } else {
2702                 msglist = (long *) cdbfr->ptr;
2703                 cdbfr->ptr = NULL;      /* CtdlSaveMsgPointerInRoom() now owns this memory */
2704                 num_msgs = cdbfr->len / sizeof(long);
2705                 cdb_free(cdbfr);
2706         }
2707
2708
2709         /* Create a list of msgid's which were supplied by the caller, but do
2710          * not already exist in the target room.  It is absolutely taboo to
2711          * have more than one reference to the same message in a room.
2712          */
2713         for (i=0; i<num_newmsgs; ++i) {
2714                 unique = 1;
2715                 if (num_msgs > 0) for (j=0; j<num_msgs; ++j) {
2716                         if (msglist[j] == newmsgidlist[i]) {
2717                                 unique = 0;
2718                         }
2719                 }
2720                 if (unique) {
2721                         msgs_to_be_merged[num_msgs_to_be_merged++] = newmsgidlist[i];
2722                 }
2723         }
2724
2725         syslog(LOG_DEBUG, "%d unique messages to be merged\n", num_msgs_to_be_merged);
2726
2727         /*
2728          * Now merge the new messages
2729          */
2730         msglist = realloc(msglist, (sizeof(long) * (num_msgs + num_msgs_to_be_merged)) );
2731         if (msglist == NULL) {
2732                 syslog(LOG_ALERT, "ERROR: can't realloc message list!\n");
2733         }
2734         memcpy(&msglist[num_msgs], msgs_to_be_merged, (sizeof(long) * num_msgs_to_be_merged) );
2735         num_msgs += num_msgs_to_be_merged;
2736
2737         /* Sort the message list, so all the msgid's are in order */
2738         num_msgs = sort_msglist(msglist, num_msgs);
2739
2740         /* Determine the highest message number */
2741         highest_msg = msglist[num_msgs - 1];
2742
2743         /* Write it back to disk. */
2744         cdb_store(CDB_MSGLISTS, &CC->room.QRnumber, (int)sizeof(long),
2745                   msglist, (int)(num_msgs * sizeof(long)));
2746
2747         /* Free up the memory we used. */
2748         free(msglist);
2749
2750         /* Update the highest-message pointer and unlock the room. */
2751         CC->room.QRhighest = highest_msg;
2752         CtdlPutRoomLock(&CC->room);
2753
2754         /* Perform replication checks if necessary */
2755         if ( (DoesThisRoomNeedEuidIndexing(&CC->room)) && (do_repl_check) ) {
2756                 syslog(LOG_DEBUG, "CtdlSaveMsgPointerInRoom() doing repl checks\n");
2757
2758                 for (i=0; i<num_msgs_to_be_merged; ++i) {
2759                         msgid = msgs_to_be_merged[i];
2760
2761                         if (supplied_msg != NULL) {
2762                                 msg = supplied_msg;
2763                         }
2764                         else {
2765                                 msg = CtdlFetchMessage(msgid, 0);
2766                         }
2767
2768                         if (msg != NULL) {
2769                                 ReplicationChecks(msg);
2770
2771                                 /* If the message has an Exclusive ID, index that... */
2772                                 if (msg->cm_fields['E'] != NULL) {
2773                                         index_message_by_euid(msg->cm_fields['E'], &CC->room, msgid);
2774                                 }
2775
2776                                 /* Free up the memory we may have allocated */
2777                                 if (msg != supplied_msg) {
2778                                         CtdlFreeMessage(msg);
2779                                 }
2780                         }
2781
2782                 }
2783         }
2784
2785         else {
2786                 syslog(LOG_DEBUG, "CtdlSaveMsgPointerInRoom() skips repl checks\n");
2787         }
2788
2789         /* Submit this room for processing by hooks */
2790         PerformRoomHooks(&CC->room);
2791
2792         /* Go back to the room we were in before we wandered here... */
2793         CtdlGetRoom(&CC->room, hold_rm);
2794
2795         /* Bump the reference count for all messages which were merged */
2796         if (!suppress_refcount_adj) {
2797                 for (i=0; i<num_msgs_to_be_merged; ++i) {
2798                         AdjRefCount(msgs_to_be_merged[i], +1);
2799                 }
2800         }
2801
2802         /* Free up memory... */
2803         if (msgs_to_be_merged != NULL) {
2804                 free(msgs_to_be_merged);
2805         }
2806
2807         /* Return success. */
2808         return (0);
2809 }
2810
2811
2812 /*
2813  * This is the same as CtdlSaveMsgPointersInRoom() but it only accepts
2814  * a single message.
2815  */
2816 int CtdlSaveMsgPointerInRoom(char *roomname, long msgid,
2817                              int do_repl_check, struct CtdlMessage *supplied_msg)
2818 {
2819         return CtdlSaveMsgPointersInRoom(roomname, &msgid, 1, do_repl_check, supplied_msg, 0);
2820 }
2821
2822
2823
2824
2825 /*
2826  * Message base operation to save a new message to the message store
2827  * (returns new message number)
2828  *
2829  * This is the back end for CtdlSubmitMsg() and should not be directly
2830  * called by server-side modules.
2831  *
2832  */
2833 long send_message(struct CtdlMessage *msg) {
2834         long newmsgid;
2835         long retval;
2836         char msgidbuf[256];
2837         struct ser_ret smr;
2838         int is_bigmsg = 0;
2839         char *holdM = NULL;
2840
2841         /* Get a new message number */
2842         newmsgid = get_new_message_number();
2843         snprintf(msgidbuf, sizeof msgidbuf, "%08lX-%08lX@%s",
2844                  (long unsigned int) time(NULL),
2845                  (long unsigned int) newmsgid,
2846                  config.c_fqdn
2847                 );
2848
2849         /* Generate an ID if we don't have one already */
2850         if (msg->cm_fields['I']==NULL) {
2851                 msg->cm_fields['I'] = strdup(msgidbuf);
2852         }
2853
2854         /* If the message is big, set its body aside for storage elsewhere */
2855         if (msg->cm_fields['M'] != NULL) {
2856                 if (strlen(msg->cm_fields['M']) > BIGMSG) {
2857                         is_bigmsg = 1;
2858                         holdM = msg->cm_fields['M'];
2859                         msg->cm_fields['M'] = NULL;
2860                 }
2861         }
2862
2863         /* Serialize our data structure for storage in the database */
2864         serialize_message(&smr, msg);
2865
2866         if (is_bigmsg) {
2867                 msg->cm_fields['M'] = holdM;
2868         }
2869
2870         if (smr.len == 0) {
2871                 cprintf("%d Unable to serialize message\n",
2872                         ERROR + INTERNAL_ERROR);
2873                 return (-1L);
2874         }
2875
2876         /* Write our little bundle of joy into the message base */
2877         if (cdb_store(CDB_MSGMAIN, &newmsgid, (int)sizeof(long),
2878                       smr.ser, smr.len) < 0) {
2879                 syslog(LOG_ERR, "Can't store message\n");
2880                 retval = 0L;
2881         } else {
2882                 if (is_bigmsg) {
2883                         cdb_store(CDB_BIGMSGS,
2884                                   &newmsgid,
2885                                   (int)sizeof(long),
2886                                   holdM,
2887                                   (strlen(holdM) + 1)
2888                                 );
2889                 }
2890                 retval = newmsgid;
2891         }
2892
2893         /* Free the memory we used for the serialized message */
2894         free(smr.ser);
2895
2896         /* Return the *local* message ID to the caller
2897          * (even if we're storing an incoming network message)
2898          */
2899         return(retval);
2900 }
2901
2902
2903
2904 /*
2905  * Serialize a struct CtdlMessage into the format used on disk and network.
2906  *
2907  * This function loads up a "struct ser_ret" (defined in server.h) which
2908  * contains the length of the serialized message and a pointer to the
2909  * serialized message in memory.  THE LATTER MUST BE FREED BY THE CALLER.
2910  */
2911 void serialize_message(struct ser_ret *ret,             /* return values */
2912                        struct CtdlMessage *msg) /* unserialized msg */
2913 {
2914         size_t wlen, fieldlen;
2915         int i;
2916         static char *forder = FORDER;
2917
2918         /*
2919          * Check for valid message format
2920          */
2921         if (is_valid_message(msg) == 0) {
2922                 syslog(LOG_ERR, "serialize_message() aborting due to invalid message\n");
2923                 ret->len = 0;
2924                 ret->ser = NULL;
2925                 return;
2926         }
2927
2928         ret->len = 3;
2929         for (i=0; i<26; ++i) if (msg->cm_fields[(int)forder[i]] != NULL)
2930                                      ret->len = ret->len +
2931                                              strlen(msg->cm_fields[(int)forder[i]]) + 2;
2932
2933         ret->ser = malloc(ret->len);
2934         if (ret->ser == NULL) {
2935                 syslog(LOG_ERR, "serialize_message() malloc(%ld) failed: %s\n",
2936                        (long)ret->len, strerror(errno));
2937                 ret->len = 0;
2938                 ret->ser = NULL;
2939                 return;
2940         }
2941
2942         ret->ser[0] = 0xFF;
2943         ret->ser[1] = msg->cm_anon_type;
2944         ret->ser[2] = msg->cm_format_type;
2945         wlen = 3;
2946
2947         for (i=0; i<26; ++i) if (msg->cm_fields[(int)forder[i]] != NULL) {
2948                         fieldlen = strlen(msg->cm_fields[(int)forder[i]]);
2949                         ret->ser[wlen++] = (char)forder[i];
2950                         safestrncpy((char *)&ret->ser[wlen], msg->cm_fields[(int)forder[i]], fieldlen+1);
2951                         wlen = wlen + fieldlen + 1;
2952                 }
2953         if (ret->len != wlen) syslog(LOG_ERR, "ERROR: len=%ld wlen=%ld\n",
2954                                      (long)ret->len, (long)wlen);
2955
2956         return;
2957 }
2958
2959
2960 /*
2961  * Serialize a struct CtdlMessage into the format used on disk and network.
2962  *
2963  * This function loads up a "struct ser_ret" (defined in server.h) which
2964  * contains the length of the serialized message and a pointer to the
2965  * serialized message in memory.  THE LATTER MUST BE FREED BY THE CALLER.
2966  */
2967 void dump_message(struct CtdlMessage *msg,      /* unserialized msg */
2968                   long Siz)                     /* how many chars ? */
2969 {
2970         int i;
2971         static char *forder = FORDER;
2972         char *buf;
2973
2974         /*
2975          * Check for valid message format
2976          */
2977         if (is_valid_message(msg) == 0) {
2978                 syslog(LOG_ERR, "dump_message() aborting due to invalid message\n");
2979                 return;
2980         }
2981
2982         buf = (char*) malloc (Siz + 1);
2983
2984         for (i=0; i<26; ++i) if (msg->cm_fields[(int)forder[i]] != NULL) {
2985                         snprintf (buf, Siz, " msg[%c] = %s ...\n", (char) forder[i],
2986                                    msg->cm_fields[(int)forder[i]]);
2987                         if (client_write (buf, strlen(buf)) == -1)
2988                         {
2989                                 syslog(LOG_ERR, "dump_message(): aborting due to write failure.\n");
2990                                 return;
2991                         }
2992                 }
2993
2994         return;
2995 }
2996
2997
2998
2999 /*
3000  * Check to see if any messages already exist in the current room which
3001  * carry the same Exclusive ID as this one.  If any are found, delete them.
3002  */
3003 void ReplicationChecks(struct CtdlMessage *msg) {
3004         long old_msgnum = (-1L);
3005
3006         if (DoesThisRoomNeedEuidIndexing(&CC->room) == 0) return;
3007
3008         syslog(LOG_DEBUG, "Performing replication checks in <%s>\n",
3009                CC->room.QRname);
3010
3011         /* No exclusive id?  Don't do anything. */
3012         if (msg == NULL) return;
3013         if (msg->cm_fields['E'] == NULL) return;
3014         if (IsEmptyStr(msg->cm_fields['E'])) return;
3015         /*syslog(LOG_DEBUG, "Exclusive ID: <%s> for room <%s>\n",
3016           msg->cm_fields['E'], CC->room.QRname);*/
3017
3018         old_msgnum = CtdlLocateMessageByEuid(msg->cm_fields['E'], &CC->room);
3019         if (old_msgnum > 0L) {
3020                 syslog(LOG_DEBUG, "ReplicationChecks() replacing message %ld\n", old_msgnum);
3021                 CtdlDeleteMessages(CC->room.QRname, &old_msgnum, 1, "");
3022         }
3023 }
3024
3025
3026
3027 /*
3028  * Save a message to disk and submit it into the delivery system.
3029  */
3030 long CtdlSubmitMsg(struct CtdlMessage *msg,     /* message to save */
3031                    struct recptypes *recps,     /* recipients (if mail) */
3032                    const char *force,           /* force a particular room? */
3033                    int flags                    /* should the message be exported clean? */
3034         )
3035 {
3036         char submit_filename[128];
3037         char generated_timestamp[32];
3038         char hold_rm[ROOMNAMELEN];
3039         char actual_rm[ROOMNAMELEN];
3040         char force_room[ROOMNAMELEN];
3041         char content_type[SIZ];                 /* We have to learn this */
3042         char recipient[SIZ];
3043         long newmsgid;
3044         const char *mptr = NULL;
3045         struct ctdluser userbuf;
3046         int a, i;
3047         struct MetaData smi;
3048         FILE *network_fp = NULL;
3049         static int seqnum = 1;
3050         struct CtdlMessage *imsg = NULL;
3051         char *instr = NULL;
3052         size_t instr_alloc = 0;
3053         struct ser_ret smr;
3054         char *hold_R, *hold_D;
3055         char *collected_addresses = NULL;
3056         struct addresses_to_be_filed *aptr = NULL;
3057         StrBuf *saved_rfc822_version = NULL;
3058         int qualified_for_journaling = 0;
3059         CitContext *CCC = MyContext();
3060         char bounce_to[1024] = "";
3061         int rv = 0;
3062
3063         syslog(LOG_DEBUG, "CtdlSubmitMsg() called\n");
3064         if (is_valid_message(msg) == 0) return(-1);     /* self check */
3065
3066         /* If this message has no timestamp, we take the liberty of
3067          * giving it one, right now.
3068          */
3069         if (msg->cm_fields['T'] == NULL) {
3070                 snprintf(generated_timestamp, sizeof generated_timestamp, "%ld", (long)time(NULL));
3071                 msg->cm_fields['T'] = strdup(generated_timestamp);
3072         }
3073
3074         /* If this message has no path, we generate one.
3075          */
3076         if (msg->cm_fields['P'] == NULL) {
3077                 if (msg->cm_fields['A'] != NULL) {
3078                         msg->cm_fields['P'] = strdup(msg->cm_fields['A']);
3079                         for (a=0; !IsEmptyStr(&msg->cm_fields['P'][a]); ++a) {
3080                                 if (isspace(msg->cm_fields['P'][a])) {
3081                                         msg->cm_fields['P'][a] = ' ';
3082                                 }
3083                         }
3084                 }
3085                 else {
3086                         msg->cm_fields['P'] = strdup("unknown");
3087                 }
3088         }
3089
3090         if (force == NULL) {
3091                 strcpy(force_room, "");
3092         }
3093         else {
3094                 strcpy(force_room, force);
3095         }
3096
3097         /* Learn about what's inside, because it's what's inside that counts */
3098         if (msg->cm_fields['M'] == NULL) {
3099                 syslog(LOG_ERR, "ERROR: attempt to save message with NULL body\n");
3100                 return(-2);
3101         }
3102
3103         switch (msg->cm_format_type) {
3104         case 0:
3105                 strcpy(content_type, "text/x-citadel-variformat");
3106                 break;
3107         case 1:
3108                 strcpy(content_type, "text/plain");
3109                 break;
3110         case 4:
3111                 strcpy(content_type, "text/plain");
3112                 mptr = bmstrcasestr(msg->cm_fields['M'], "Content-type:");
3113                 if (mptr != NULL) {
3114                         char *aptr;
3115                         safestrncpy(content_type, &mptr[13], sizeof content_type);
3116                         striplt(content_type);
3117                         aptr = content_type;
3118                         while (!IsEmptyStr(aptr)) {
3119                                 if ((*aptr == ';')
3120                                     || (*aptr == ' ')
3121                                     || (*aptr == 13)
3122                                     || (*aptr == 10)) {
3123                                         *aptr = 0;
3124                                 }
3125                                 else aptr++;
3126                         }
3127                 }
3128         }
3129
3130         /* Goto the correct room */
3131         syslog(LOG_DEBUG, "Selected room %s\n", (recps) ? CCC->room.QRname : SENTITEMS);
3132         strcpy(hold_rm, CCC->room.QRname);
3133         strcpy(actual_rm, CCC->room.QRname);
3134         if (recps != NULL) {
3135                 strcpy(actual_rm, SENTITEMS);
3136         }
3137
3138         /* If the user is a twit, move to the twit room for posting */
3139         if (TWITDETECT) {
3140                 if (CCC->user.axlevel == AxProbU) {
3141                         strcpy(hold_rm, actual_rm);
3142                         strcpy(actual_rm, config.c_twitroom);
3143                         syslog(LOG_DEBUG, "Diverting to twit room\n");
3144                 }
3145         }
3146
3147         /* ...or if this message is destined for Aide> then go there. */
3148         if (!IsEmptyStr(force_room)) {
3149                 strcpy(actual_rm, force_room);
3150         }
3151
3152         syslog(LOG_DEBUG, "Final selection: %s\n", actual_rm);
3153         if (strcasecmp(actual_rm, CCC->room.QRname)) {
3154                 /* CtdlGetRoom(&CCC->room, actual_rm); */
3155                 CtdlUserGoto(actual_rm, 0, 1, NULL, NULL);
3156         }
3157
3158         /*
3159          * If this message has no O (room) field, generate one.
3160          */
3161         if (msg->cm_fields['O'] == NULL) {
3162                 msg->cm_fields['O'] = strdup(CCC->room.QRname);
3163         }
3164
3165         /* Perform "before save" hooks (aborting if any return nonzero) */
3166         syslog(LOG_DEBUG, "Performing before-save hooks\n");
3167         if (PerformMessageHooks(msg, EVT_BEFORESAVE) > 0) return(-3);
3168
3169         /*
3170          * If this message has an Exclusive ID, and the room is replication
3171          * checking enabled, then do replication checks.
3172          */
3173         if (DoesThisRoomNeedEuidIndexing(&CCC->room)) {
3174                 ReplicationChecks(msg);
3175         }
3176
3177         /* Save it to disk */
3178         syslog(LOG_DEBUG, "Saving to disk\n");
3179         newmsgid = send_message(msg);
3180         if (newmsgid <= 0L) return(-5);
3181
3182         /* Write a supplemental message info record.  This doesn't have to
3183          * be a critical section because nobody else knows about this message
3184          * yet.
3185          */
3186         syslog(LOG_DEBUG, "Creating MetaData record\n");
3187         memset(&smi, 0, sizeof(struct MetaData));
3188         smi.meta_msgnum = newmsgid;
3189         smi.meta_refcount = 0;
3190         safestrncpy(smi.meta_content_type, content_type,
3191                     sizeof smi.meta_content_type);
3192
3193         /*
3194          * Measure how big this message will be when rendered as RFC822.
3195          * We do this for two reasons:
3196          * 1. We need the RFC822 length for the new metadata record, so the
3197          *    POP and IMAP services don't have to calculate message lengths
3198          *    while the user is waiting (multiplied by potentially hundreds
3199          *    or thousands of messages).
3200          * 2. If journaling is enabled, we will need an RFC822 version of the
3201          *    message to attach to the journalized copy.
3202          */
3203         if (CCC->redirect_buffer != NULL) {
3204                 syslog(LOG_ALERT, "CCC->redirect_buffer is not NULL during message submission!\n");
3205                 abort();
3206         }
3207         CCC->redirect_buffer = NewStrBufPlain(NULL, SIZ);
3208         CtdlOutputPreLoadedMsg(msg, MT_RFC822, HEADERS_ALL, 0, 1, QP_EADDR);
3209         smi.meta_rfc822_length = StrLength(CCC->redirect_buffer);
3210         saved_rfc822_version = CCC->redirect_buffer;
3211         CCC->redirect_buffer = NULL;
3212
3213         PutMetaData(&smi);
3214
3215         /* Now figure out where to store the pointers */
3216         syslog(LOG_DEBUG, "Storing pointers\n");
3217
3218         /* If this is being done by the networker delivering a private
3219          * message, we want to BYPASS saving the sender's copy (because there
3220          * is no local sender; it would otherwise go to the Trashcan).
3221          */
3222         if ((!CCC->internal_pgm) || (recps == NULL)) {
3223                 if (CtdlSaveMsgPointerInRoom(actual_rm, newmsgid, 1, msg) != 0) {
3224                         syslog(LOG_ERR, "ERROR saving message pointer!\n");
3225                         CtdlSaveMsgPointerInRoom(config.c_aideroom, newmsgid, 0, msg);
3226                 }
3227         }
3228
3229         /* For internet mail, drop a copy in the outbound queue room */
3230         if ((recps != NULL) && (recps->num_internet > 0)) {
3231                 CtdlSaveMsgPointerInRoom(SMTP_SPOOLOUT_ROOM, newmsgid, 0, msg);
3232         }
3233
3234         /* If other rooms are specified, drop them there too. */
3235         if ((recps != NULL) && (recps->num_room > 0))
3236                 for (i=0; i<num_tokens(recps->recp_room, '|'); ++i) {
3237                         extract_token(recipient, recps->recp_room, i,
3238                                       '|', sizeof recipient);
3239                         syslog(LOG_DEBUG, "Delivering to room <%s>\n", recipient);///// xxxx
3240                         CtdlSaveMsgPointerInRoom(recipient, newmsgid, 0, msg);
3241                 }
3242
3243         /* Bump this user's messages posted counter. */
3244         syslog(LOG_DEBUG, "Updating user\n");
3245         CtdlGetUserLock(&CCC->user, CCC->curr_user);
3246         CCC->user.posted = CCC->user.posted + 1;
3247         CtdlPutUserLock(&CCC->user);
3248
3249         /* Decide where bounces need to be delivered */
3250         if ((recps != NULL) && (recps->bounce_to != NULL)) {
3251                 safestrncpy(bounce_to, recps->bounce_to, sizeof bounce_to);
3252         }
3253         else if (CCC->logged_in) {
3254                 snprintf(bounce_to, sizeof bounce_to, "%s@%s", CCC->user.fullname, config.c_nodename);
3255         }
3256         else {
3257                 snprintf(bounce_to, sizeof bounce_to, "%s@%s", msg->cm_fields['A'], msg->cm_fields['N']);
3258         }
3259
3260         /* If this is private, local mail, make a copy in the
3261          * recipient's mailbox and bump the reference count.
3262          */
3263         if ((recps != NULL) && (recps->num_local > 0))
3264                 for (i=0; i<num_tokens(recps->recp_local, '|'); ++i) {
3265                         extract_token(recipient, recps->recp_local, i,
3266                                       '|', sizeof recipient);
3267                         syslog(LOG_DEBUG, "Delivering private local mail to <%s>\n",
3268                                recipient);
3269                         if (CtdlGetUser(&userbuf, recipient) == 0) {
3270                                 CtdlMailboxName(actual_rm, sizeof actual_rm, &userbuf, MAILROOM);
3271                                 CtdlSaveMsgPointerInRoom(actual_rm, newmsgid, 0, msg);
3272                                 CtdlBumpNewMailCounter(userbuf.usernum);
3273                                 if (!IsEmptyStr(config.c_funambol_host) || !IsEmptyStr(config.c_pager_program)) {
3274                                         /* Generate a instruction message for the Funambol notification
3275                                          * server, in the same style as the SMTP queue
3276                                          */
3277                                         instr_alloc = 1024;
3278                                         instr = malloc(instr_alloc);
3279                                         snprintf(instr, instr_alloc,
3280                                                  "Content-type: %s\n\nmsgid|%ld\nsubmitted|%ld\n"
3281                                                  "bounceto|%s\n",
3282                                                  SPOOLMIME, newmsgid, (long)time(NULL),
3283                                                  bounce_to
3284                                                 );
3285
3286                                         imsg = malloc(sizeof(struct CtdlMessage));
3287                                         memset(imsg, 0, sizeof(struct CtdlMessage));
3288                                         imsg->cm_magic = CTDLMESSAGE_MAGIC;
3289                                         imsg->cm_anon_type = MES_NORMAL;
3290                                         imsg->cm_format_type = FMT_RFC822;
3291                                         imsg->cm_fields['U'] = strdup("QMSG");
3292                                         imsg->cm_fields['A'] = strdup("Citadel");
3293                                         imsg->cm_fields['J'] = strdup("do not journal");
3294                                         imsg->cm_fields['M'] = instr;   /* imsg owns this memory now */
3295                                         imsg->cm_fields['2'] = strdup(recipient);
3296                                         CtdlSubmitMsg(imsg, NULL, FNBL_QUEUE_ROOM, 0);
3297                                         CtdlFreeMessage(imsg);
3298                                 }
3299                         }
3300                         else {
3301                                 syslog(LOG_DEBUG, "No user <%s>\n", recipient);
3302                                 CtdlSaveMsgPointerInRoom(config.c_aideroom, newmsgid, 0, msg);
3303                         }
3304                 }
3305
3306         /* Perform "after save" hooks */
3307         syslog(LOG_DEBUG, "Performing after-save hooks\n");
3308         if (msg->cm_fields['3'] != NULL) free(msg->cm_fields['3']);
3309         msg->cm_fields['3'] = malloc(20);
3310         snprintf(msg->cm_fields['3'], 20, "%ld", newmsgid);
3311         PerformMessageHooks(msg, EVT_AFTERSAVE);
3312         free(msg->cm_fields['3']);
3313         msg->cm_fields['3'] = NULL;
3314
3315         /* For IGnet mail, we have to save a new copy into the spooler for
3316          * each recipient, with the R and D fields set to the recipient and
3317          * destination-node.  This has two ugly side effects: all other
3318          * recipients end up being unlisted in this recipient's copy of the
3319          * message, and it has to deliver multiple messages to the same
3320          * node.  We'll revisit this again in a year or so when everyone has
3321          * a network spool receiver that can handle the new style messages.
3322          */
3323         if ((recps != NULL) && (recps->num_ignet > 0))
3324                 for (i=0; i<num_tokens(recps->recp_ignet, '|'); ++i) {
3325                         extract_token(recipient, recps->recp_ignet, i,
3326                                       '|', sizeof recipient);
3327
3328                         hold_R = msg->cm_fields['R'];
3329                         hold_D = msg->cm_fields['D'];
3330                         msg->cm_fields['R'] = malloc(SIZ);
3331                         msg->cm_fields['D'] = malloc(128);
3332                         extract_token(msg->cm_fields['R'], recipient, 0, '@', SIZ);
3333                         extract_token(msg->cm_fields['D'], recipient, 1, '@', 128);
3334
3335                         serialize_message(&smr, msg);
3336                         if (smr.len > 0) {
3337                                 snprintf(submit_filename, sizeof submit_filename,
3338                                          "%s/netmail.%04lx.%04x.%04x",
3339                                          ctdl_netin_dir,
3340                                          (long) getpid(), CCC->cs_pid, ++seqnum);
3341                                 network_fp = fopen(submit_filename, "wb+");
3342                                 if (network_fp != NULL) {
3343                                         rv = fwrite(smr.ser, smr.len, 1, network_fp);
3344                                         if (rv == -1) {
3345                                                 syslog(LOG_EMERG, "CtdlSubmitMsg(): Couldn't write network spool file: %s\n",
3346                                                        strerror(errno));
3347                                         }
3348                                         fclose(network_fp);
3349                                 }
3350                                 free(smr.ser);
3351                         }
3352
3353                         free(msg->cm_fields['R']);
3354                         free(msg->cm_fields['D']);
3355                         msg->cm_fields['R'] = hold_R;
3356                         msg->cm_fields['D'] = hold_D;
3357                 }
3358
3359         /* Go back to the room we started from */
3360         syslog(LOG_DEBUG, "Returning to original room %s\n", hold_rm);
3361         if (strcasecmp(hold_rm, CCC->room.QRname))
3362                 CtdlUserGoto(hold_rm, 0, 1, NULL, NULL);
3363
3364         /* For internet mail, generate delivery instructions.
3365          * Yes, this is recursive.  Deal with it.  Infinite recursion does
3366          * not happen because the delivery instructions message does not
3367          * contain a recipient.
3368          */
3369         if ((recps != NULL) && (recps->num_internet > 0)) {
3370                 StrBuf *SpoolMsg = NewStrBuf();
3371                 long nTokens;
3372
3373                 syslog(LOG_DEBUG, "Generating delivery instructions\n");
3374
3375                 StrBufPrintf(SpoolMsg,
3376                              "Content-type: "SPOOLMIME"\n"
3377                              "\n"
3378                              "msgid|%ld\n"
3379                              "submitted|%ld\n"
3380                              "bounceto|%s\n",
3381                              newmsgid,
3382                              (long)time(NULL),
3383                              bounce_to);
3384
3385                 if (recps->envelope_from != NULL) {
3386                         StrBufAppendBufPlain(SpoolMsg, HKEY("envelope_from|"), 0);
3387                         StrBufAppendBufPlain(SpoolMsg, recps->envelope_from, -1, 0);
3388                         StrBufAppendBufPlain(SpoolMsg, HKEY("\n"), 0);
3389                 }
3390                 if (recps->sending_room != NULL) {
3391                         StrBufAppendBufPlain(SpoolMsg, HKEY("source_room|"), 0);
3392                         StrBufAppendBufPlain(SpoolMsg, recps->sending_room, -1, 0);
3393                         StrBufAppendBufPlain(SpoolMsg, HKEY("\n"), 0);
3394                 }
3395
3396                 nTokens = num_tokens(recps->recp_internet, '|');
3397                 for (i = 0; i < nTokens; i++) {
3398                         long len;
3399                         len = extract_token(recipient, recps->recp_internet, i, '|', sizeof recipient);
3400                         if (len > 0) {
3401                                 StrBufAppendBufPlain(SpoolMsg, HKEY("remote|"), 0);
3402                                 StrBufAppendBufPlain(SpoolMsg, recipient, len, 0);
3403                                 StrBufAppendBufPlain(SpoolMsg, HKEY("|0||\n"), 0);
3404                         }
3405                 }
3406
3407                 imsg = malloc(sizeof(struct CtdlMessage));
3408                 memset(imsg, 0, sizeof(struct CtdlMessage));
3409                 imsg->cm_magic = CTDLMESSAGE_MAGIC;
3410                 imsg->cm_anon_type = MES_NORMAL;
3411                 imsg->cm_format_type = FMT_RFC822;
3412                 imsg->cm_fields['U'] = strdup("QMSG");
3413                 imsg->cm_fields['A'] = strdup("Citadel");
3414                 imsg->cm_fields['J'] = strdup("do not journal");
3415                 imsg->cm_fields['M'] = SmashStrBuf(&SpoolMsg);  /* imsg owns this memory now */
3416                 CtdlSubmitMsg(imsg, NULL, SMTP_SPOOLOUT_ROOM, QP_EADDR);
3417                 CtdlFreeMessage(imsg);
3418         }
3419
3420         /*
3421          * Any addresses to harvest for someone's address book?
3422          */
3423         if ( (CCC->logged_in) && (recps != NULL) ) {
3424                 collected_addresses = harvest_collected_addresses(msg);
3425         }
3426
3427         if (collected_addresses != NULL) {
3428                 aptr = (struct addresses_to_be_filed *)
3429                         malloc(sizeof(struct addresses_to_be_filed));
3430                 CtdlMailboxName(actual_rm, sizeof actual_rm,
3431                                 &CCC->user, USERCONTACTSROOM);
3432                 aptr->roomname = strdup(actual_rm);
3433                 aptr->collected_addresses = collected_addresses;
3434                 begin_critical_section(S_ATBF);
3435                 aptr->next = atbf;
3436                 atbf = aptr;
3437                 end_critical_section(S_ATBF);
3438         }
3439
3440         /*
3441          * Determine whether this message qualifies for journaling.
3442          */
3443         if (msg->cm_fields['J'] != NULL) {
3444                 qualified_for_journaling = 0;
3445         }
3446         else {
3447                 if (recps == NULL) {
3448                         qualified_for_journaling = config.c_journal_pubmsgs;
3449                 }
3450                 else if (recps->num_local + recps->num_ignet + recps->num_internet > 0) {
3451                         qualified_for_journaling = config.c_journal_email;
3452                 }
3453                 else {
3454                         qualified_for_journaling = config.c_journal_pubmsgs;
3455                 }
3456         }
3457
3458         /*
3459          * Do we have to perform journaling?  If so, hand off the saved
3460          * RFC822 version will be handed off to the journaler for background
3461          * submit.  Otherwise, we have to free the memory ourselves.
3462          */
3463         if (saved_rfc822_version != NULL) {
3464                 if (qualified_for_journaling) {
3465                         JournalBackgroundSubmit(msg, saved_rfc822_version, recps);
3466                 }
3467                 else {
3468                         FreeStrBuf(&saved_rfc822_version);
3469                 }
3470         }
3471
3472         /* Done. */
3473         return(newmsgid);
3474 }
3475
3476
3477
3478 void aide_message (char *text, char *subject)
3479 {
3480         quickie_message("Citadel",NULL,NULL,AIDEROOM,text,FMT_CITADEL,subject);
3481 }
3482
3483
3484 /*
3485  * Convenience function for generating small administrative messages.
3486  */
3487 void quickie_message(const char *from, const char *fromaddr, char *to, char *room, const char *text,
3488                      int format_type, const char *subject)
3489 {
3490         struct CtdlMessage *msg;
3491         struct recptypes *recp = NULL;
3492
3493         msg = malloc(sizeof(struct CtdlMessage));
3494         memset(msg, 0, sizeof(struct CtdlMessage));
3495         msg->cm_magic = CTDLMESSAGE_MAGIC;
3496         msg->cm_anon_type = MES_NORMAL;
3497         msg->cm_format_type = format_type;
3498
3499         if (from != NULL) {
3500                 msg->cm_fields['A'] = strdup(from);
3501         }
3502         else if (fromaddr != NULL) {
3503                 msg->cm_fields['A'] = strdup(fromaddr);
3504                 if (strchr(msg->cm_fields['A'], '@')) {
3505                         *strchr(msg->cm_fields['A'], '@') = 0;
3506                 }
3507         }
3508         else {
3509                 msg->cm_fields['A'] = strdup("Citadel");
3510         }
3511
3512         if (fromaddr != NULL) msg->cm_fields['F'] = strdup(fromaddr);
3513         if (room != NULL) msg->cm_fields['O'] = strdup(room);
3514         msg->cm_fields['N'] = strdup(NODENAME);
3515         if (to != NULL) {
3516                 msg->cm_fields['R'] = strdup(to);
3517                 recp = validate_recipients(to, NULL, 0);
3518         }
3519         if (subject != NULL) {
3520                 msg->cm_fields['U'] = strdup(subject);
3521         }
3522         msg->cm_fields['M'] = strdup(text);
3523
3524         CtdlSubmitMsg(msg, recp, room, 0);
3525         CtdlFreeMessage(msg);
3526         if (recp != NULL) free_recipients(recp);
3527 }
3528
3529
3530
3531 /*
3532  * Back end function used by CtdlMakeMessage() and similar functions
3533  */
3534 StrBuf *CtdlReadMessageBodyBuf(char *terminator,        /* token signalling EOT */
3535                                long tlen,
3536                                size_t maxlen,           /* maximum message length */
3537                                char *exist,             /* if non-null, append to it;
3538                                                            exist is ALWAYS freed  */
3539                                int crlf,                /* CRLF newlines instead of LF */
3540                                int *sock                /* socket handle or 0 for this session's client socket */
3541         )
3542 {
3543         StrBuf *Message;
3544         StrBuf *LineBuf;
3545         int flushing = 0;
3546         int finished = 0;
3547         int dotdot = 0;
3548
3549         LineBuf = NewStrBufPlain(NULL, SIZ);
3550         if (exist == NULL) {
3551                 Message = NewStrBufPlain(NULL, 4 * SIZ);
3552         }
3553         else {
3554                 Message = NewStrBufPlain(exist, -1);
3555                 free(exist);
3556         }
3557
3558         /* Do we need to change leading ".." to "." for SMTP escaping? */
3559         if ((tlen == 1) && (*terminator == '.')) {
3560                 dotdot = 1;
3561         }
3562
3563         /* read in the lines of message text one by one */
3564         do {
3565                 if (sock != NULL) {
3566                         if ((CtdlSockGetLine(sock, LineBuf, 5) < 0) ||
3567                             (*sock == -1))
3568                                 finished = 1;
3569                 }
3570                 else {
3571                         if (CtdlClientGetLine(LineBuf) < 0) finished = 1;
3572                 }
3573                 if ((StrLength(LineBuf) == tlen) &&
3574                     (!strcmp(ChrPtr(LineBuf), terminator)))
3575                         finished = 1;
3576
3577                 if ( (!flushing) && (!finished) ) {
3578                         if (crlf) {
3579                                 StrBufAppendBufPlain(LineBuf, HKEY("\r\n"), 0);
3580                         }
3581                         else {
3582                                 StrBufAppendBufPlain(LineBuf, HKEY("\n"), 0);
3583                         }
3584
3585                         /* Unescape SMTP-style input of two dots at the beginning of the line */
3586                         if ((dotdot) &&
3587                             (StrLength(LineBuf) == 2) &&
3588                             (!strcmp(ChrPtr(LineBuf), "..")))
3589                         {
3590                                 StrBufCutLeft(LineBuf, 1);
3591                         }
3592
3593                         StrBufAppendBuf(Message, LineBuf, 0);
3594                 }
3595
3596                 /* if we've hit the max msg length, flush the rest */
3597                 if (StrLength(Message) >= maxlen) flushing = 1;
3598
3599         } while (!finished);
3600         FreeStrBuf(&LineBuf);
3601         return Message;
3602 }
3603
3604 void DeleteAsyncMsg(ReadAsyncMsg **Msg)
3605 {
3606         if (*Msg == NULL)
3607                 return;
3608         FreeStrBuf(&(*Msg)->MsgBuf);
3609
3610         free(*Msg);
3611         *Msg = NULL;
3612 }
3613
3614 ReadAsyncMsg *NewAsyncMsg(const char *terminator,       /* token signalling EOT */
3615                           long tlen,
3616                           size_t maxlen,                /* maximum message length */
3617                           size_t expectlen,             /* if we expect a message, how long should it be? */
3618                           char *exist,                  /* if non-null, append to it;
3619                                                            exist is ALWAYS freed  */
3620                           long eLen,                    /* length of exist */
3621                           int crlf                      /* CRLF newlines instead of LF */
3622         )
3623 {
3624         ReadAsyncMsg *NewMsg;
3625
3626         NewMsg = (ReadAsyncMsg *)malloc(sizeof(ReadAsyncMsg));
3627         memset(NewMsg, 0, sizeof(ReadAsyncMsg));
3628
3629         if (exist == NULL) {
3630                 long len;
3631
3632                 if (expectlen == 0) {
3633                         len = 4 * SIZ;
3634                 }
3635                 else {
3636                         len = expectlen + 10;
3637                 }
3638                 NewMsg->MsgBuf = NewStrBufPlain(NULL, len);
3639         }
3640         else {
3641                 NewMsg->MsgBuf = NewStrBufPlain(exist, eLen);
3642                 free(exist);
3643         }
3644         /* Do we need to change leading ".." to "." for SMTP escaping? */
3645         if ((tlen == 1) && (*terminator == '.')) {
3646                 NewMsg->dodot = 1;
3647         }
3648
3649         NewMsg->terminator = terminator;
3650         NewMsg->tlen = tlen;
3651
3652         NewMsg->maxlen = maxlen;
3653
3654         NewMsg->crlf = crlf;
3655
3656         return NewMsg;
3657 }
3658
3659 /*
3660  * Back end function used by CtdlMakeMessage() and similar functions
3661  */
3662 eReadState CtdlReadMessageBodyAsync(AsyncIO *IO)
3663 {
3664         ReadAsyncMsg *ReadMsg;
3665         int MsgFinished = 0;
3666         eReadState Finished = eMustReadMore;
3667
3668 #ifdef BIGBAD_IODBG
3669         char fn [SIZ];
3670         FILE *fd;
3671         const char *pch = ChrPtr(IO->SendBuf.Buf);
3672         const char *pchh = IO->SendBuf.ReadWritePointer;
3673         long nbytes;
3674
3675         if (pchh == NULL)
3676                 pchh = pch;
3677
3678         nbytes = StrLength(IO->SendBuf.Buf) - (pchh - pch);
3679         snprintf(fn, SIZ, "/tmp/foolog_ev_%s.%d",
3680                  ((CitContext*)(IO->CitContext))->ServiceName,
3681                  IO->SendBuf.fd);
3682
3683         fd = fopen(fn, "a+");
3684 #endif
3685
3686         ReadMsg = IO->ReadMsg;
3687
3688         /* read in the lines of message text one by one */
3689         do {
3690                 Finished = StrBufChunkSipLine(IO->IOBuf, &IO->RecvBuf);
3691
3692                 switch (Finished) {
3693                 case eMustReadMore: /// read new from socket...
3694 #ifdef BIGBAD_IODBG
3695                         if (IO->RecvBuf.ReadWritePointer != NULL) {
3696                                 nbytes = StrLength(IO->RecvBuf.Buf) - (IO->RecvBuf.ReadWritePointer - ChrPtr(IO->RecvBuf.Buf));
3697                                 fprintf(fd, "Read; Line unfinished: %ld Bytes still in buffer [", nbytes);
3698
3699                                 fwrite(IO->RecvBuf.ReadWritePointer, nbytes, 1, fd);
3700
3701                                 fprintf(fd, "]\n");
3702                         } else {
3703                                 fprintf(fd, "BufferEmpty! \n");
3704                         }
3705                         fclose(fd);
3706 #endif
3707                         return Finished;
3708                     break;
3709                 case eBufferNotEmpty: /* shouldn't happen... */
3710                 case eReadSuccess: /// done for now...
3711                     break;
3712                 case eReadFail: /// WHUT?
3713                     ///todo: shut down!
3714                         break;
3715                 }
3716
3717
3718                 if ((StrLength(IO->IOBuf) == ReadMsg->tlen) &&
3719                     (!strcmp(ChrPtr(IO->IOBuf), ReadMsg->terminator))) {
3720                         MsgFinished = 1;
3721 #ifdef BIGBAD_IODBG
3722                         fprintf(fd, "found Terminator; Message Size: %d\n", StrLength(ReadMsg->MsgBuf));
3723 #endif
3724                 }
3725                 else if (!ReadMsg->flushing) {
3726
3727 #ifdef BIGBAD_IODBG
3728                         fprintf(fd, "Read Line: [%d][%s]\n", StrLength(IO->IOBuf), ChrPtr(IO->IOBuf));
3729 #endif
3730
3731                         /* Unescape SMTP-style input of two dots at the beginning of the line */
3732                         if ((ReadMsg->dodot) &&
3733                             (StrLength(IO->IOBuf) == 2) &&  /* TODO: do we just unescape lines with two dots or any line? */
3734                             (!strcmp(ChrPtr(IO->IOBuf), "..")))
3735                         {
3736 #ifdef BIGBAD_IODBG
3737                                 fprintf(fd, "UnEscaped!\n");
3738 #endif
3739                                 StrBufCutLeft(IO->IOBuf, 1);
3740                         }
3741
3742                         if (ReadMsg->crlf) {
3743                                 StrBufAppendBufPlain(IO->IOBuf, HKEY("\r\n"), 0);
3744                         }
3745                         else {
3746                                 StrBufAppendBufPlain(IO->IOBuf, HKEY("\n"), 0);
3747                         }
3748
3749                         StrBufAppendBuf(ReadMsg->MsgBuf, IO->IOBuf, 0);
3750                 }
3751
3752                 /* if we've hit the max msg length, flush the rest */
3753                 if (StrLength(ReadMsg->MsgBuf) >= ReadMsg->maxlen) ReadMsg->flushing = 1;
3754
3755         } while (!MsgFinished);
3756
3757 #ifdef BIGBAD_IODBG
3758         fprintf(fd, "Done with reading; %s.\n, ",
3759                 (MsgFinished)?"Message Finished": "FAILED");
3760         fclose(fd);
3761 #endif
3762         if (MsgFinished)
3763                 return eReadSuccess;
3764         else
3765                 return eAbort;
3766 }
3767
3768
3769 /*
3770  * Back end function used by CtdlMakeMessage() and similar functions
3771  */
3772 char *CtdlReadMessageBody(char *terminator,     /* token signalling EOT */
3773                           long tlen,
3774                           size_t maxlen,                /* maximum message length */
3775                           char *exist,          /* if non-null, append to it;
3776                                                    exist is ALWAYS freed  */
3777                           int crlf,             /* CRLF newlines instead of LF */
3778                           int *sock             /* socket handle or 0 for this session's client socket */
3779         )
3780 {
3781         StrBuf *Message;
3782
3783         Message = CtdlReadMessageBodyBuf(terminator,
3784                                          tlen,
3785                                          maxlen,
3786                                          exist,
3787                                          crlf,
3788                                          sock);
3789         if (Message == NULL)
3790                 return NULL;
3791         else
3792                 return SmashStrBuf(&Message);
3793 }
3794
3795
3796 /*
3797  * Build a binary message to be saved on disk.
3798  * (NOTE: if you supply 'preformatted_text', the buffer you give it
3799  * will become part of the message.  This means you are no longer
3800  * responsible for managing that memory -- it will be freed along with
3801  * the rest of the fields when CtdlFreeMessage() is called.)
3802  */
3803
3804 struct CtdlMessage *CtdlMakeMessage(
3805         struct ctdluser *author,        /* author's user structure */
3806         char *recipient,                /* NULL if it's not mail */
3807         char *recp_cc,                  /* NULL if it's not mail */
3808         char *room,                     /* room where it's going */
3809         int type,                       /* see MES_ types in header file */
3810         int format_type,                /* variformat, plain text, MIME... */
3811         char *fake_name,                /* who we're masquerading as */
3812         char *my_email,                 /* which of my email addresses to use (empty is ok) */
3813         char *subject,                  /* Subject (optional) */
3814         char *supplied_euid,            /* ...or NULL if this is irrelevant */
3815         char *preformatted_text,        /* ...or NULL to read text from client */
3816         char *references                /* Thread references */
3817         ) {
3818         char dest_node[256];
3819         char buf[1024];
3820         struct CtdlMessage *msg;
3821         StrBuf *FakeAuthor;
3822         StrBuf *FakeEncAuthor = NULL;
3823
3824         msg = malloc(sizeof(struct CtdlMessage));
3825         memset(msg, 0, sizeof(struct CtdlMessage));
3826         msg->cm_magic = CTDLMESSAGE_MAGIC;
3827         msg->cm_anon_type = type;
3828         msg->cm_format_type = format_type;
3829
3830         /* Don't confuse the poor folks if it's not routed mail. */
3831         strcpy(dest_node, "");
3832
3833         if (recipient != NULL) striplt(recipient);
3834         if (recp_cc != NULL) striplt(recp_cc);
3835
3836         /* Path or Return-Path */
3837         if (my_email == NULL) my_email = "";
3838
3839         if (!IsEmptyStr(my_email)) {
3840                 msg->cm_fields['P'] = strdup(my_email);
3841         }
3842         else {
3843                 snprintf(buf, sizeof buf, "%s", author->fullname);
3844                 msg->cm_fields['P'] = strdup(buf);
3845         }
3846         convert_spaces_to_underscores(msg->cm_fields['P']);
3847
3848         snprintf(buf, sizeof buf, "%ld", (long)time(NULL));     /* timestamp */
3849         msg->cm_fields['T'] = strdup(buf);
3850
3851         if ((fake_name != NULL) && (fake_name[0])) {            /* author */
3852                 FakeAuthor = NewStrBufPlain (fake_name, -1);
3853         }
3854         else {
3855                 FakeAuthor = NewStrBufPlain (author->fullname, -1);
3856         }
3857         StrBufRFC2047encode(&FakeEncAuthor, FakeAuthor);
3858         msg->cm_fields['A'] = SmashStrBuf(&FakeEncAuthor);
3859         FreeStrBuf(&FakeAuthor);
3860
3861         if (CC->room.QRflags & QR_MAILBOX) {            /* room */
3862                 msg->cm_fields['O'] = strdup(&CC->room.QRname[11]);
3863         }
3864         else {
3865                 msg->cm_fields['O'] = strdup(CC->room.QRname);
3866         }
3867
3868         msg->cm_fields['N'] = strdup(NODENAME);         /* nodename */
3869         msg->cm_fields['H'] = strdup(HUMANNODE);                /* hnodename */
3870
3871         if ((recipient != NULL) && (recipient[0] != 0)) {
3872                 msg->cm_fields['R'] = strdup(recipient);
3873         }
3874         if ((recp_cc != NULL) && (recp_cc[0] != 0)) {
3875                 msg->cm_fields['Y'] = strdup(recp_cc);
3876         }
3877         if (dest_node[0] != 0) {
3878                 msg->cm_fields['D'] = strdup(dest_node);
3879         }
3880
3881         if (!IsEmptyStr(my_email)) {
3882                 msg->cm_fields['F'] = strdup(my_email);
3883         }
3884         else if ( (author == &CC->user) && (!IsEmptyStr(CC->cs_inet_email)) ) {
3885                 msg->cm_fields['F'] = strdup(CC->cs_inet_email);
3886         }
3887
3888         if (subject != NULL) {
3889                 long length;
3890                 striplt(subject);
3891                 length = strlen(subject);
3892                 if (length > 0) {
3893                         long i;
3894                         long IsAscii;
3895                         IsAscii = -1;
3896                         i = 0;
3897                         while ((subject[i] != '\0') &&
3898                                (IsAscii = isascii(subject[i]) != 0 ))
3899                                 i++;
3900                         if (IsAscii != 0)
3901                                 msg->cm_fields['U'] = strdup(subject);
3902                         else /* ok, we've got utf8 in the string. */
3903                         {
3904                                 msg->cm_fields['U'] = rfc2047encode(subject, length);
3905                         }
3906
3907                 }
3908         }
3909
3910         if (supplied_euid != NULL) {
3911                 msg->cm_fields['E'] = strdup(supplied_euid);
3912         }
3913
3914         if ((references != NULL) && (!IsEmptyStr(references))) {
3915                 if (msg->cm_fields['W'] != NULL)
3916                         free(msg->cm_fields['W']);
3917                 msg->cm_fields['W'] = strdup(references);
3918         }
3919
3920         if (preformatted_text != NULL) {
3921                 msg->cm_fields['M'] = preformatted_text;
3922         }
3923         else {
3924                 msg->cm_fields['M'] = CtdlReadMessageBody(HKEY("000"), config.c_maxmsglen, NULL, 0, 0);
3925         }
3926
3927         return(msg);
3928 }
3929
3930 extern int netconfig_check_roomaccess(
3931         char *errmsgbuf,
3932         size_t n,
3933         const char* RemoteIdentifier); /* TODO: find a smarter way */
3934
3935 /*
3936  * Check to see whether we have permission to post a message in the current
3937  * room.  Returns a *CITADEL ERROR CODE* and puts a message in errmsgbuf, or
3938  * returns 0 on success.
3939  */
3940 int CtdlDoIHavePermissionToPostInThisRoom(
3941         char *errmsgbuf,
3942         size_t n,
3943         const char* RemoteIdentifier,
3944         int PostPublic,
3945         int is_reply
3946         ) {
3947         int ra;
3948
3949         if (!(CC->logged_in) &&
3950             (PostPublic == POST_LOGGED_IN)) {
3951                 snprintf(errmsgbuf, n, "Not logged in.");
3952                 return (ERROR + NOT_LOGGED_IN);
3953         }
3954         else if (PostPublic == CHECK_EXISTANCE) {
3955                 return (0); // We're Evaling whether a recipient exists
3956         }
3957         else if (!(CC->logged_in)) {
3958
3959                 if ((CC->room.QRflags & QR_READONLY)) {
3960                         snprintf(errmsgbuf, n, "Not logged in.");
3961                         return (ERROR + NOT_LOGGED_IN);
3962                 }
3963                 if (CC->room.QRflags2 & QR2_MODERATED) {
3964                         snprintf(errmsgbuf, n, "Not logged in Moderation feature not yet implemented!");
3965                         return (ERROR + NOT_LOGGED_IN);
3966                 }
3967                 if ((PostPublic!=POST_LMTP) &&(CC->room.QRflags2 & QR2_SMTP_PUBLIC) == 0) {
3968
3969                         return netconfig_check_roomaccess(errmsgbuf, n, RemoteIdentifier);
3970                 }
3971                 return (0);
3972
3973         }
3974
3975         if ((CC->user.axlevel < AxProbU)
3976             && ((CC->room.QRflags & QR_MAILBOX) == 0)) {
3977                 snprintf(errmsgbuf, n, "Need to be validated to enter (except in %s> to sysop)", MAILROOM);
3978                 return (ERROR + HIGHER_ACCESS_REQUIRED);
3979         }
3980
3981         CtdlRoomAccess(&CC->room, &CC->user, &ra, NULL);
3982
3983         if (ra & UA_POSTALLOWED) {
3984                 strcpy(errmsgbuf, "OK to post or reply here");
3985                 return(0);
3986         }
3987
3988         if ( (ra & UA_REPLYALLOWED) && (is_reply) ) {
3989                 /*
3990                  * To be thorough, we ought to check to see if the message they are
3991                  * replying to is actually a valid one in this room, but unless this
3992                  * actually becomes a problem we'll go with high performance instead.
3993                  */
3994                 strcpy(errmsgbuf, "OK to reply here");
3995                 return(0);
3996         }
3997
3998         if ( (ra & UA_REPLYALLOWED) && (!is_reply) ) {
3999                 /* Clarify what happened with a better error message */
4000                 snprintf(errmsgbuf, n, "You may only reply to existing messages here.");
4001                 return (ERROR + HIGHER_ACCESS_REQUIRED);
4002         }
4003
4004         snprintf(errmsgbuf, n, "Higher access is required to post in this room.");
4005         return (ERROR + HIGHER_ACCESS_REQUIRED);
4006
4007 }
4008
4009
4010 /*
4011  * Check to see if the specified user has Internet mail permission
4012  * (returns nonzero if permission is granted)
4013  */
4014 int CtdlCheckInternetMailPermission(struct ctdluser *who) {
4015
4016         /* Do not allow twits to send Internet mail */
4017         if (who->axlevel <= AxProbU) return(0);
4018
4019         /* Globally enabled? */
4020         if (config.c_restrict == 0) return(1);
4021
4022         /* User flagged ok? */
4023         if (who->flags & US_INTERNET) return(2);
4024
4025         /* Aide level access? */
4026         if (who->axlevel >= AxAideU) return(3);
4027
4028         /* No mail for you! */
4029         return(0);
4030 }
4031
4032
4033 /*
4034  * Validate recipients, count delivery types and errors, and handle aliasing
4035  * FIXME check for dupes!!!!!
4036  *
4037  * Returns 0 if all addresses are ok, ret->num_error = -1 if no addresses
4038  * were specified, or the number of addresses found invalid.
4039  *
4040  * Caller needs to free the result using free_recipients()
4041  */
4042 struct recptypes *validate_recipients(const char *supplied_recipients,
4043                                       const char *RemoteIdentifier,
4044                                       int Flags) {
4045         struct recptypes *ret;
4046         char *recipients = NULL;
4047         char *org_recp;
4048         char this_recp[256];
4049         char this_recp_cooked[256];
4050         char append[SIZ];
4051         long len;
4052         int num_recps = 0;
4053         int i, j;
4054         int mailtype;
4055         int invalid;
4056         struct ctdluser tempUS;
4057         struct ctdlroom tempQR;
4058         struct ctdlroom tempQR2;
4059         int err = 0;
4060         char errmsg[SIZ];
4061         int in_quotes = 0;
4062
4063         /* Initialize */
4064         ret = (struct recptypes *) malloc(sizeof(struct recptypes));
4065         if (ret == NULL) return(NULL);
4066
4067         /* Set all strings to null and numeric values to zero */
4068         memset(ret, 0, sizeof(struct recptypes));
4069
4070         if (supplied_recipients == NULL) {
4071                 recipients = strdup("");
4072         }
4073         else {
4074                 recipients = strdup(supplied_recipients);
4075         }
4076
4077         /* Allocate some memory.  Yes, this allocates 500% more memory than we will
4078          * actually need, but it's healthier for the heap than doing lots of tiny
4079          * realloc() calls instead.
4080          */
4081         len = strlen(recipients) + 1024;
4082         ret->errormsg = malloc(len);
4083         ret->recp_local = malloc(len);
4084         ret->recp_internet = malloc(len);
4085         ret->recp_ignet = malloc(len);
4086         ret->recp_room = malloc(len);
4087         ret->display_recp = malloc(len);
4088         ret->recp_orgroom = malloc(len);
4089         org_recp = malloc(len);
4090
4091         ret->errormsg[0] = 0;
4092         ret->recp_local[0] = 0;
4093         ret->recp_internet[0] = 0;
4094         ret->recp_ignet[0] = 0;
4095         ret->recp_room[0] = 0;
4096         ret->recp_orgroom[0] = 0;
4097         ret->display_recp[0] = 0;
4098
4099         ret->recptypes_magic = RECPTYPES_MAGIC;
4100
4101         /* Change all valid separator characters to commas */
4102         for (i=0; !IsEmptyStr(&recipients[i]); ++i) {
4103                 if ((recipients[i] == ';') || (recipients[i] == '|')) {
4104                         recipients[i] = ',';
4105                 }
4106         }
4107
4108         /* Now start extracting recipients... */
4109
4110         while (!IsEmptyStr(recipients)) {
4111                 for (i=0; i<=strlen(recipients); ++i) {
4112                         if (recipients[i] == '\"') in_quotes = 1 - in_quotes;
4113                         if ( ( (recipients[i] == ',') && (!in_quotes) ) || (recipients[i] == 0) ) {
4114                                 safestrncpy(this_recp, recipients, i+1);
4115                                 this_recp[i] = 0;
4116                                 if (recipients[i] == ',') {
4117                                         strcpy(recipients, &recipients[i+1]);
4118                                 }
4119                                 else {
4120                                         strcpy(recipients, "");
4121                                 }
4122                                 break;
4123                         }
4124                 }
4125
4126                 striplt(this_recp);
4127                 if (IsEmptyStr(this_recp))
4128                         break;
4129                 syslog(LOG_DEBUG, "Evaluating recipient #%d: %s\n", num_recps, this_recp);
4130                 ++num_recps;
4131
4132                 strcpy(org_recp, this_recp);
4133                 mailtype = alias(this_recp);
4134                 mailtype = alias(this_recp);
4135                 mailtype = alias(this_recp);
4136                 j = 0;
4137                 for (j=0; !IsEmptyStr(&this_recp[j]); ++j) {
4138                         if (this_recp[j]=='_') {
4139                                 this_recp_cooked[j] = ' ';
4140                         }
4141                         else {
4142                                 this_recp_cooked[j] = this_recp[j];
4143                         }
4144                 }
4145                 this_recp_cooked[j] = '\0';
4146                 invalid = 0;
4147                 errmsg[0] = 0;
4148                 switch(mailtype) {
4149                 case MES_LOCAL:
4150                         if (!strcasecmp(this_recp, "sysop")) {
4151                                 ++ret->num_room;
4152                                 strcpy(this_recp, config.c_aideroom);
4153                                 if (!IsEmptyStr(ret->recp_room)) {
4154                                         strcat(ret->recp_room, "|");
4155                                 }
4156                                 strcat(ret->recp_room, this_recp);
4157                         }
4158                         else if ( (!strncasecmp(this_recp, "room_", 5))
4159                                   && (!CtdlGetRoom(&tempQR, &this_recp_cooked[5])) ) {
4160
4161                                 /* Save room so we can restore it later */
4162                                 tempQR2 = CC->room;
4163                                 CC->room = tempQR;
4164
4165                                 /* Check permissions to send mail to this room */
4166                                 err = CtdlDoIHavePermissionToPostInThisRoom(
4167                                         errmsg,
4168                                         sizeof errmsg,
4169                                         RemoteIdentifier,
4170                                         Flags,
4171                                         0                       /* 0 = not a reply */
4172                                         );
4173                                 if (err)
4174                                 {
4175                                         ++ret->num_error;
4176                                         invalid = 1;
4177                                 }
4178                                 else {
4179                                         ++ret->num_room;
4180                                         if (!IsEmptyStr(ret->recp_room)) {
4181                                                 strcat(ret->recp_room, "|");
4182                                         }
4183                                         strcat(ret->recp_room, &this_recp_cooked[5]);
4184
4185                                         if (!IsEmptyStr(ret->recp_orgroom)) {
4186                                                 strcat(ret->recp_orgroom, "|");
4187                                         }
4188                                         strcat(ret->recp_orgroom, org_recp);
4189
4190                                 }
4191
4192                                 /* Restore room in case something needs it */
4193                                 CC->room = tempQR2;
4194
4195                         }
4196                         else if (CtdlGetUser(&tempUS, this_recp) == 0) {
4197                                 ++ret->num_local;
4198                                 strcpy(this_recp, tempUS.fullname);
4199                                 if (!IsEmptyStr(ret->recp_local)) {
4200                                         strcat(ret->recp_local, "|");
4201                                 }
4202                                 strcat(ret->recp_local, this_recp);
4203                         }
4204                         else if (CtdlGetUser(&tempUS, this_recp_cooked) == 0) {
4205                                 ++ret->num_local;
4206                                 strcpy(this_recp, tempUS.fullname);
4207                                 if (!IsEmptyStr(ret->recp_local)) {
4208                                         strcat(ret->recp_local, "|");
4209                                 }
4210                                 strcat(ret->recp_local, this_recp);
4211                         }
4212                         else {
4213                                 ++ret->num_error;
4214                                 invalid = 1;
4215                         }
4216                         break;
4217                 case MES_INTERNET:
4218                         /* Yes, you're reading this correctly: if the target
4219                          * domain points back to the local system or an attached
4220                          * Citadel directory, the address is invalid.  That's
4221                          * because if the address were valid, we would have
4222                          * already translated it to a local address by now.
4223                          */
4224                         if (IsDirectory(this_recp, 0)) {
4225                                 ++ret->num_error;
4226                                 invalid = 1;
4227                         }
4228                         else {
4229                                 ++ret->num_internet;
4230                                 if (!IsEmptyStr(ret->recp_internet)) {
4231                                         strcat(ret->recp_internet, "|");
4232                                 }
4233                                 strcat(ret->recp_internet, this_recp);
4234                         }
4235                         break;
4236                 case MES_IGNET:
4237                         ++ret->num_ignet;
4238                         if (!IsEmptyStr(ret->recp_ignet)) {
4239                                 strcat(ret->recp_ignet, "|");
4240                         }
4241                         strcat(ret->recp_ignet, this_recp);
4242                         break;
4243                 case MES_ERROR:
4244                         ++ret->num_error;
4245                         invalid = 1;
4246                         break;
4247                 }
4248                 if (invalid) {
4249                         if (IsEmptyStr(errmsg)) {
4250                                 snprintf(append, sizeof append, "Invalid recipient: %s", this_recp);
4251                         }
4252                         else {
4253                                 snprintf(append, sizeof append, "%s", errmsg);
4254                         }
4255                         if ( (strlen(ret->errormsg) + strlen(append) + 3) < SIZ) {
4256                                 if (!IsEmptyStr(ret->errormsg)) {
4257                                         strcat(ret->errormsg, "; ");
4258                                 }
4259                                 strcat(ret->errormsg, append);
4260                         }
4261                 }
4262                 else {
4263                         if (IsEmptyStr(ret->display_recp)) {
4264                                 strcpy(append, this_recp);
4265                         }
4266                         else {
4267                                 snprintf(append, sizeof append, ", %s", this_recp);
4268                         }
4269                         if ( (strlen(ret->display_recp)+strlen(append)) < SIZ) {
4270                                 strcat(ret->display_recp, append);
4271                         }
4272                 }
4273         }
4274         free(org_recp);
4275
4276         if ((ret->num_local + ret->num_internet + ret->num_ignet +
4277              ret->num_room + ret->num_error) == 0) {
4278                 ret->num_error = (-1);
4279                 strcpy(ret->errormsg, "No recipients specified.");
4280         }
4281
4282         syslog(LOG_DEBUG, "validate_recipients()\n");
4283         syslog(LOG_DEBUG, " local: %d <%s>\n", ret->num_local, ret->recp_local);
4284         syslog(LOG_DEBUG, "  room: %d <%s>\n", ret->num_room, ret->recp_room);
4285         syslog(LOG_DEBUG, "  inet: %d <%s>\n", ret->num_internet, ret->recp_internet);
4286         syslog(LOG_DEBUG, " ignet: %d <%s>\n", ret->num_ignet, ret->recp_ignet);
4287         syslog(LOG_DEBUG, " error: %d <%s>\n", ret->num_error, ret->errormsg);
4288
4289         free(recipients);
4290         return(ret);
4291 }
4292
4293
4294 /*
4295  * Destructor for struct recptypes
4296  */
4297 void free_recipients(struct recptypes *valid) {
4298
4299         if (valid == NULL) {
4300                 return;
4301         }
4302
4303         if (valid->recptypes_magic != RECPTYPES_MAGIC) {
4304                 syslog(LOG_EMERG, "Attempt to call free_recipients() on some other data type!\n");
4305                 abort();
4306         }
4307
4308         if (valid->errormsg != NULL)            free(valid->errormsg);
4309         if (valid->recp_local != NULL)          free(valid->recp_local);
4310         if (valid->recp_internet != NULL)       free(valid->recp_internet);
4311         if (valid->recp_ignet != NULL)          free(valid->recp_ignet);
4312         if (valid->recp_room != NULL)           free(valid->recp_room);
4313         if (valid->recp_orgroom != NULL)        free(valid->recp_orgroom);
4314         if (valid->display_recp != NULL)        free(valid->display_recp);
4315         if (valid->bounce_to != NULL)           free(valid->bounce_to);
4316         if (valid->envelope_from != NULL)       free(valid->envelope_from);
4317         free(valid);
4318 }
4319
4320
4321
4322 /*
4323  * message entry  -  mode 0 (normal)
4324  */
4325 void cmd_ent0(char *entargs)
4326 {
4327         struct CitContext *CCC = CC;
4328         int post = 0;
4329         char recp[SIZ];
4330         char cc[SIZ];
4331         char bcc[SIZ];
4332         char supplied_euid[128];
4333         int anon_flag = 0;
4334         int format_type = 0;
4335         char newusername[256];
4336         char newuseremail[256];
4337         struct CtdlMessage *msg;
4338         int anonymous = 0;
4339         char errmsg[SIZ];
4340         int err = 0;
4341         struct recptypes *valid = NULL;
4342         struct recptypes *valid_to = NULL;
4343         struct recptypes *valid_cc = NULL;
4344         struct recptypes *valid_bcc = NULL;
4345         char subject[SIZ];
4346         int subject_required = 0;
4347         int do_confirm = 0;
4348         int verbose_reply = 0;
4349         long msgnum;
4350         int i, j;
4351         char buf[256];
4352         int newuseremail_ok = 0;
4353         char references[SIZ];
4354         char *ptr;
4355
4356         unbuffer_output();
4357
4358         post = extract_int(entargs, 0);
4359         extract_token(recp, entargs, 1, '|', sizeof recp);
4360         anon_flag = extract_int(entargs, 2);
4361         format_type = extract_int(entargs, 3);
4362         extract_token(subject, entargs, 4, '|', sizeof subject);
4363         extract_token(newusername, entargs, 5, '|', sizeof newusername);
4364         do_confirm = extract_int(entargs, 6);
4365         extract_token(cc, entargs, 7, '|', sizeof cc);
4366         extract_token(bcc, entargs, 8, '|', sizeof bcc);
4367         verbose_reply = extract_int(entargs, 9);
4368         switch(CC->room.QRdefaultview) {
4369         case VIEW_NOTES:
4370         case VIEW_WIKI:
4371                 extract_token(supplied_euid, entargs, 9, '|', sizeof supplied_euid);
4372                 break;
4373         default:
4374                 supplied_euid[0] = 0;
4375                 break;
4376         }
4377         extract_token(newuseremail, entargs, 10, '|', sizeof newuseremail);
4378         extract_token(references, entargs, 11, '|', sizeof references);
4379         for (ptr=references; *ptr != 0; ++ptr) {
4380                 if (*ptr == '!') *ptr = '|';
4381         }
4382
4383         /* first check to make sure the request is valid. */
4384
4385         err = CtdlDoIHavePermissionToPostInThisRoom(
4386                 errmsg,
4387                 sizeof errmsg,
4388                 NULL,
4389                 POST_LOGGED_IN,
4390                 (!IsEmptyStr(references))               /* is this a reply?  or a top-level post? */
4391                 );
4392         if (err)
4393         {
4394                 cprintf("%d %s\n", err, errmsg);
4395                 return;
4396         }
4397
4398         /* Check some other permission type things. */
4399
4400         if (IsEmptyStr(newusername)) {
4401                 strcpy(newusername, CCC->user.fullname);
4402         }
4403         if (  (CCC->user.axlevel < AxAideU)
4404               && (strcasecmp(newusername, CCC->user.fullname))
4405               && (strcasecmp(newusername, CCC->cs_inet_fn))
4406                 ) {
4407                 cprintf("%d You don't have permission to author messages as '%s'.\n",
4408                         ERROR + HIGHER_ACCESS_REQUIRED,
4409                         newusername
4410                         );
4411                 return;
4412         }
4413
4414
4415         if (IsEmptyStr(newuseremail)) {
4416                 newuseremail_ok = 1;
4417         }
4418
4419         if (!IsEmptyStr(newuseremail)) {
4420                 if (!strcasecmp(newuseremail, CCC->cs_inet_email)) {
4421                         newuseremail_ok = 1;
4422                 }
4423                 else if (!IsEmptyStr(CCC->cs_inet_other_emails)) {
4424                         j = num_tokens(CCC->cs_inet_other_emails, '|');
4425                         for (i=0; i<j; ++i) {
4426                                 extract_token(buf, CCC->cs_inet_other_emails, i, '|', sizeof buf);
4427                                 if (!strcasecmp(newuseremail, buf)) {
4428                                         newuseremail_ok = 1;
4429                                 }
4430                         }
4431                 }
4432         }
4433
4434         if (!newuseremail_ok) {
4435                 cprintf("%d You don't have permission to author messages as '%s'.\n",
4436                         ERROR + HIGHER_ACCESS_REQUIRED,
4437                         newuseremail
4438                         );
4439                 return;
4440         }
4441
4442         CCC->cs_flags |= CS_POSTING;
4443
4444         /* In mailbox rooms we have to behave a little differently --
4445          * make sure the user has specified at least one recipient.  Then
4446          * validate the recipient(s).  We do this for the Mail> room, as
4447          * well as any room which has the "Mailbox" view set - unless it
4448          * is the DRAFTS room which does not require recipients
4449          */
4450
4451         if ( (  ( (CCC->room.QRflags & QR_MAILBOX) && (!strcasecmp(&CCC->room.QRname[11], MAILROOM)) )
4452                 || ( (CCC->room.QRflags & QR_MAILBOX) && (CCC->curr_view == VIEW_MAILBOX) )
4453                      ) && (strcasecmp(&CCC->room.QRname[11], USERDRAFTROOM)) !=0 ) {
4454                 if (CCC->user.axlevel < AxProbU) {
4455                         strcpy(recp, "sysop");
4456                         strcpy(cc, "");
4457                         strcpy(bcc, "");
4458                 }
4459
4460                 valid_to = validate_recipients(recp, NULL, 0);
4461                 if (valid_to->num_error > 0) {
4462                         cprintf("%d %s\n", ERROR + NO_SUCH_USER, valid_to->errormsg);
4463                         free_recipients(valid_to);
4464                         return;
4465                 }
4466
4467                 valid_cc = validate_recipients(cc, NULL, 0);
4468                 if (valid_cc->num_error > 0) {
4469                         cprintf("%d %s\n", ERROR + NO_SUCH_USER, valid_cc->errormsg);
4470                         free_recipients(valid_to);
4471                         free_recipients(valid_cc);
4472                         return;
4473                 }
4474
4475                 valid_bcc = validate_recipients(bcc, NULL, 0);
4476                 if (valid_bcc->num_error > 0) {
4477                         cprintf("%d %s\n", ERROR + NO_SUCH_USER, valid_bcc->errormsg);
4478                         free_recipients(valid_to);
4479                         free_recipients(valid_cc);
4480                         free_recipients(valid_bcc);
4481                         return;
4482                 }
4483
4484                 /* Recipient required, but none were specified */
4485                 if ( (valid_to->num_error < 0) && (valid_cc->num_error < 0) && (valid_bcc->num_error < 0) ) {
4486                         free_recipients(valid_to);
4487                         free_recipients(valid_cc);
4488                         free_recipients(valid_bcc);
4489                         cprintf("%d At least one recipient is required.\n", ERROR + NO_SUCH_USER);
4490                         return;
4491                 }
4492
4493                 if (valid_to->num_internet + valid_cc->num_internet + valid_bcc->num_internet > 0) {
4494                         if (CtdlCheckInternetMailPermission(&CCC->user)==0) {
4495                                 cprintf("%d You do not have permission "
4496                                         "to send Internet mail.\n",
4497                                         ERROR + HIGHER_ACCESS_REQUIRED);
4498                                 free_recipients(valid_to);
4499                                 free_recipients(valid_cc);
4500                                 free_recipients(valid_bcc);
4501                                 return;
4502                         }
4503                 }
4504
4505                 if ( ( (valid_to->num_internet + valid_to->num_ignet + valid_cc->num_internet + valid_cc->num_ignet + valid_bcc->num_internet + valid_bcc->num_ignet) > 0)
4506                      && (CCC->user.axlevel < AxNetU) ) {
4507                         cprintf("%d Higher access required for network mail.\n",
4508                                 ERROR + HIGHER_ACCESS_REQUIRED);
4509                         free_recipients(valid_to);
4510                         free_recipients(valid_cc);
4511                         free_recipients(valid_bcc);
4512                         return;
4513                 }
4514
4515                 if ((RESTRICT_INTERNET == 1)
4516                     && (valid_to->num_internet + valid_cc->num_internet + valid_bcc->num_internet > 0)
4517                     && ((CCC->user.flags & US_INTERNET) == 0)
4518                     && (!CCC->internal_pgm)) {
4519                         cprintf("%d You don't have access to Internet mail.\n",
4520                                 ERROR + HIGHER_ACCESS_REQUIRED);
4521                         free_recipients(valid_to);
4522                         free_recipients(valid_cc);
4523                         free_recipients(valid_bcc);
4524                         return;
4525                 }
4526
4527         }
4528
4529         /* Is this a room which has anonymous-only or anonymous-option? */
4530         anonymous = MES_NORMAL;
4531         if (CCC->room.QRflags & QR_ANONONLY) {
4532                 anonymous = MES_ANONONLY;
4533         }
4534         if (CCC->room.QRflags & QR_ANONOPT) {
4535                 if (anon_flag == 1) {   /* only if the user requested it */
4536                         anonymous = MES_ANONOPT;
4537                 }
4538         }
4539
4540         if ((CCC->room.QRflags & QR_MAILBOX) == 0) {
4541                 recp[0] = 0;
4542         }
4543
4544         /* Recommend to the client that the use of a message subject is
4545          * strongly recommended in this room, if either the SUBJECTREQ flag
4546          * is set, or if there is one or more Internet email recipients.
4547          */
4548         if (CCC->room.QRflags2 & QR2_SUBJECTREQ) subject_required = 1;
4549         if ((valid_to)  && (valid_to->num_internet > 0))        subject_required = 1;
4550         if ((valid_cc)  && (valid_cc->num_internet > 0))        subject_required = 1;
4551         if ((valid_bcc) && (valid_bcc->num_internet > 0))       subject_required = 1;
4552
4553         /* If we're only checking the validity of the request, return
4554          * success without creating the message.
4555          */
4556         if (post == 0) {
4557                 cprintf("%d %s|%d\n", CIT_OK,
4558                         ((valid_to != NULL) ? valid_to->display_recp : ""),
4559                         subject_required);
4560                 free_recipients(valid_to);
4561                 free_recipients(valid_cc);
4562                 free_recipients(valid_bcc);
4563                 return;
4564         }
4565
4566         /* We don't need these anymore because we'll do it differently below */
4567         free_recipients(valid_to);
4568         free_recipients(valid_cc);
4569         free_recipients(valid_bcc);
4570
4571         /* Read in the message from the client. */
4572         if (do_confirm) {
4573                 cprintf("%d send message\n", START_CHAT_MODE);
4574         } else {
4575                 cprintf("%d send message\n", SEND_LISTING);
4576         }
4577
4578         msg = CtdlMakeMessage(&CCC->user, recp, cc,
4579                               CCC->room.QRname, anonymous, format_type,
4580                               newusername, newuseremail, subject,
4581                               ((!IsEmptyStr(supplied_euid)) ? supplied_euid : NULL),
4582                               NULL, references);
4583
4584         /* Put together one big recipients struct containing to/cc/bcc all in
4585          * one.  This is for the envelope.
4586          */
4587         char *all_recps = malloc(SIZ * 3);
4588         strcpy(all_recps, recp);
4589         if (!IsEmptyStr(cc)) {
4590                 if (!IsEmptyStr(all_recps)) {
4591                         strcat(all_recps, ",");
4592                 }
4593                 strcat(all_recps, cc);
4594         }
4595         if (!IsEmptyStr(bcc)) {
4596                 if (!IsEmptyStr(all_recps)) {
4597                         strcat(all_recps, ",");
4598                 }
4599                 strcat(all_recps, bcc);
4600         }
4601         if (!IsEmptyStr(all_recps)) {
4602                 valid = validate_recipients(all_recps, NULL, 0);
4603         }
4604         else {
4605                 valid = NULL;
4606         }
4607         free(all_recps);
4608
4609         if ((valid != NULL) && (valid->num_room == 1))
4610         {
4611                 /* posting into an ML room? set the envelope from
4612                  * to the actual mail address so others get a valid
4613                  * reply-to-header.
4614                  */
4615                 msg->cm_fields['V'] = strdup(valid->recp_orgroom);
4616         }
4617
4618         if (msg != NULL) {
4619                 msgnum = CtdlSubmitMsg(msg, valid, "", QP_EADDR);
4620                 if (verbose_reply)
4621                 {
4622                         if (StrLength(CCC->StatusMessage)>0)
4623                         {
4624                                 StrBufAppendBufPlain(CCC->StatusMessage, HKEY("\n000\n"), 0);
4625                                 cputbuf(CCC->StatusMessage);
4626                         }
4627                         else
4628                                 client_write(HKEY("\n000\n"));
4629                 }
4630
4631                 if (do_confirm) {
4632                         cprintf("%ld\n", msgnum);
4633                         if (msgnum >= 0L) {
4634                                 client_write(HKEY("Message accepted.\n"));
4635                         }
4636                         else {
4637                                 client_write(HKEY("Internal error.\n"));
4638                         }
4639                         if (msg->cm_fields['E'] != NULL) {
4640                                 cprintf("%s\n", msg->cm_fields['E']);
4641                         } else {
4642                                 cprintf("\n");
4643                         }
4644                         cprintf("000\n");
4645                 }
4646
4647                 CtdlFreeMessage(msg);
4648         }
4649         if (valid != NULL) {
4650                 free_recipients(valid);
4651         }
4652         return;
4653 }
4654
4655
4656
4657 /*
4658  * API function to delete messages which match a set of criteria
4659  * (returns the actual number of messages deleted)
4660  */
4661 int CtdlDeleteMessages(char *room_name,         /* which room */
4662                        long *dmsgnums,          /* array of msg numbers to be deleted */
4663                        int num_dmsgnums,        /* number of msgs to be deleted, or 0 for "any" */
4664                        char *content_type       /* or "" for any.  regular expressions expected. */
4665         )
4666 {
4667         struct ctdlroom qrbuf;
4668         struct cdbdata *cdbfr;
4669         long *msglist = NULL;
4670         long *dellist = NULL;
4671         int num_msgs = 0;
4672         int i, j;
4673         int num_deleted = 0;
4674         int delete_this;
4675         struct MetaData smi;
4676         regex_t re;
4677         regmatch_t pm;
4678         int need_to_free_re = 0;
4679
4680         if (content_type) if (!IsEmptyStr(content_type)) {
4681                         regcomp(&re, content_type, 0);
4682                         need_to_free_re = 1;
4683                 }
4684         syslog(LOG_DEBUG, "CtdlDeleteMessages(%s, %d msgs, %s)\n",
4685                room_name, num_dmsgnums, content_type);
4686
4687         /* get room record, obtaining a lock... */
4688         if (CtdlGetRoomLock(&qrbuf, room_name) != 0) {
4689                 syslog(LOG_ERR, "CtdlDeleteMessages(): Room <%s> not found\n",
4690                        room_name);
4691                 if (need_to_free_re) regfree(&re);
4692                 return (0);     /* room not found */
4693         }
4694         cdbfr = cdb_fetch(CDB_MSGLISTS, &qrbuf.QRnumber, sizeof(long));
4695
4696         if (cdbfr != NULL) {
4697                 dellist = malloc(cdbfr->len);
4698                 msglist = (long *) cdbfr->ptr;
4699                 cdbfr->ptr = NULL;      /* CtdlDeleteMessages() now owns this memory */
4700                 num_msgs = cdbfr->len / sizeof(long);
4701                 cdb_free(cdbfr);
4702         }
4703         if (num_msgs > 0) {
4704                 int have_contenttype = !IsEmptyStr(content_type);
4705                 int have_delmsgs = (num_dmsgnums == 0) || (dmsgnums == NULL);
4706                 int have_more_del = 1;
4707
4708                 num_msgs = sort_msglist(msglist, num_msgs);
4709                 if (num_dmsgnums > 1)
4710                         num_dmsgnums = sort_msglist(dmsgnums, num_dmsgnums);
4711 /*
4712                 {
4713                         StrBuf *dbg = NewStrBuf();
4714                         for (i = 0; i < num_dmsgnums; i++)
4715                                 StrBufAppendPrintf(dbg, ", %ld", dmsgnums[i]);
4716                         syslog(LOG_DEBUG, "Deleting before: %s", ChrPtr(dbg));
4717                         FreeStrBuf(&dbg);
4718                 }
4719 */
4720                 i = 0; j = 0;
4721                 while ((i < num_msgs) && (have_more_del)) {
4722                         delete_this = 0x00;
4723
4724
4725                         /* Set/clear a bit for each criterion */
4726
4727                         /* 0 messages in the list or a null list means that we are
4728                          * interested in deleting any messages which meet the other criteria.
4729                          */
4730                         if (have_delmsgs) {
4731                                 delete_this |= 0x01;
4732                         }
4733                         else {
4734                                 while ((i < num_msgs) && (msglist[i] < dmsgnums[j])) i++;
4735                                 if (msglist[i] == dmsgnums[j]) {
4736                                         delete_this |= 0x01;
4737                                 }
4738                                 j++;
4739                                 have_more_del = (j < num_dmsgnums);
4740                         }
4741
4742                         if (have_contenttype) {
4743                                 GetMetaData(&smi, msglist[i]);
4744                                 if (regexec(&re, smi.meta_content_type, 1, &pm, 0) == 0) {
4745                                         delete_this |= 0x02;
4746                                 }
4747                         } else {
4748                                 delete_this |= 0x02;
4749                         }
4750
4751                         /* Delete message only if all bits are set */
4752                         if (delete_this == 0x03) {
4753                                 dellist[num_deleted++] = msglist[i];
4754                                 msglist[i] = 0L;
4755                         }
4756                         i++;
4757                 }
4758 /*
4759                 {
4760                         StrBuf *dbg = NewStrBuf();
4761                         for (i = 0; i < num_deleted; i++)
4762                                 StrBufAppendPrintf(dbg, ", %ld", dellist[i]);
4763                         syslog(LOG_DEBUG, "Deleting: %s", ChrPtr(dbg));
4764                         FreeStrBuf(&dbg);
4765                 }
4766 */
4767                 num_msgs = sort_msglist(msglist, num_msgs);
4768                 cdb_store(CDB_MSGLISTS, &qrbuf.QRnumber, (int)sizeof(long),
4769                           msglist, (int)(num_msgs * sizeof(long)));
4770
4771                 if (num_msgs > 0)
4772                         qrbuf.QRhighest = msglist[num_msgs - 1];
4773                 else
4774                         qrbuf.QRhighest = 0;
4775         }
4776         CtdlPutRoomLock(&qrbuf);
4777
4778         /* Go through the messages we pulled out of the index, and decrement
4779          * their reference counts by 1.  If this is the only room the message
4780          * was in, the reference count will reach zero and the message will
4781          * automatically be deleted from the database.  We do this in a
4782          * separate pass because there might be plug-in hooks getting called,
4783          * and we don't want that happening during an S_ROOMS critical
4784          * section.
4785          */
4786         if (num_deleted) {
4787                 for (i=0; i<num_deleted; ++i) {
4788                         PerformDeleteHooks(qrbuf.QRname, dellist[i]);
4789                 }
4790                 AdjRefCountList(dellist, num_deleted, -1);
4791         }
4792         /* Now free the memory we used, and go away. */
4793         if (msglist != NULL) free(msglist);
4794         if (dellist != NULL) free(dellist);
4795         syslog(LOG_DEBUG, "%d message(s) deleted.\n", num_deleted);
4796         if (need_to_free_re) regfree(&re);
4797         return (num_deleted);
4798 }
4799
4800
4801
4802 /*
4803  * Check whether the current user has permission to delete messages from
4804  * the current room (returns 1 for yes, 0 for no)
4805  */
4806 int CtdlDoIHavePermissionToDeleteMessagesFromThisRoom(void) {
4807         int ra;
4808         CtdlRoomAccess(&CC->room, &CC->user, &ra, NULL);
4809         if (ra & UA_DELETEALLOWED) return(1);
4810         return(0);
4811 }
4812
4813
4814
4815
4816 /*
4817  * Delete message from current room
4818  */
4819 void cmd_dele(char *args)
4820 {
4821         int num_deleted;
4822         int i;
4823         char msgset[SIZ];
4824         char msgtok[32];
4825         long *msgs;
4826         int num_msgs = 0;
4827
4828         extract_token(msgset, args, 0, '|', sizeof msgset);
4829         num_msgs = num_tokens(msgset, ',');
4830         if (num_msgs < 1) {
4831                 cprintf("%d Nothing to do.\n", CIT_OK);
4832                 return;
4833         }
4834
4835         if (CtdlDoIHavePermissionToDeleteMessagesFromThisRoom() == 0) {
4836                 cprintf("%d Higher access required.\n",
4837                         ERROR + HIGHER_ACCESS_REQUIRED);
4838                 return;
4839         }
4840
4841         /*
4842          * Build our message set to be moved/copied
4843          */
4844         msgs = malloc(num_msgs * sizeof(long));
4845         for (i=0; i<num_msgs; ++i) {
4846                 extract_token(msgtok, msgset, i, ',', sizeof msgtok);
4847                 msgs[i] = atol(msgtok);
4848         }
4849
4850         num_deleted = CtdlDeleteMessages(CC->room.QRname, msgs, num_msgs, "");
4851         free(msgs);
4852
4853         if (num_deleted) {
4854                 cprintf("%d %d message%s deleted.\n", CIT_OK,
4855                         num_deleted, ((num_deleted != 1) ? "s" : ""));
4856         } else {
4857                 cprintf("%d Message not found.\n", ERROR + MESSAGE_NOT_FOUND);
4858         }
4859 }
4860
4861
4862
4863
4864 /*
4865  * move or copy a message to another room
4866  */
4867 void cmd_move(char *args)
4868 {
4869         char msgset[SIZ];
4870         char msgtok[32];
4871         long *msgs;
4872         int num_msgs = 0;
4873
4874         char targ[ROOMNAMELEN];
4875         struct ctdlroom qtemp;
4876         int err;
4877         int is_copy = 0;
4878         int ra;
4879         int permit = 0;
4880         int i;
4881
4882         extract_token(msgset, args, 0, '|', sizeof msgset);
4883         num_msgs = num_tokens(msgset, ',');
4884         if (num_msgs < 1) {
4885                 cprintf("%d Nothing to do.\n", CIT_OK);
4886                 return;
4887         }
4888
4889         extract_token(targ, args, 1, '|', sizeof targ);
4890         convert_room_name_macros(targ, sizeof targ);
4891         targ[ROOMNAMELEN - 1] = 0;
4892         is_copy = extract_int(args, 2);
4893
4894         if (CtdlGetRoom(&qtemp, targ) != 0) {
4895                 cprintf("%d '%s' does not exist.\n", ERROR + ROOM_NOT_FOUND, targ);
4896                 return;
4897         }
4898
4899         if (!strcasecmp(qtemp.QRname, CC->room.QRname)) {
4900                 cprintf("%d Source and target rooms are the same.\n", ERROR + ALREADY_EXISTS);
4901                 return;
4902         }
4903
4904         CtdlGetUser(&CC->user, CC->curr_user);
4905         CtdlRoomAccess(&qtemp, &CC->user, &ra, NULL);
4906
4907         /* Check for permission to perform this operation.
4908          * Remember: "CC->room" is source, "qtemp" is target.
4909          */
4910         permit = 0;
4911
4912         /* Aides can move/copy */
4913         if (CC->user.axlevel >= AxAideU) permit = 1;
4914
4915         /* Room aides can move/copy */
4916         if (CC->user.usernum == CC->room.QRroomaide) permit = 1;
4917
4918         /* Permit move/copy from personal rooms */
4919         if ((CC->room.QRflags & QR_MAILBOX)
4920             && (qtemp.QRflags & QR_MAILBOX)) permit = 1;
4921
4922         /* Permit only copy from public to personal room */
4923         if ( (is_copy)
4924              && (!(CC->room.QRflags & QR_MAILBOX))
4925              && (qtemp.QRflags & QR_MAILBOX)) permit = 1;
4926
4927         /* Permit message removal from collaborative delete rooms */
4928         if (CC->room.QRflags2 & QR2_COLLABDEL) permit = 1;
4929
4930         /* Users allowed to post into the target room may move into it too. */
4931         if ((CC->room.QRflags & QR_MAILBOX) &&
4932             (qtemp.QRflags & UA_POSTALLOWED))  permit = 1;
4933
4934         /* User must have access to target room */
4935         if (!(ra & UA_KNOWN))  permit = 0;
4936
4937         if (!permit) {
4938                 cprintf("%d Higher access required.\n",
4939                         ERROR + HIGHER_ACCESS_REQUIRED);
4940                 return;
4941         }
4942
4943         /*
4944          * Build our message set to be moved/copied
4945          */
4946         msgs = malloc(num_msgs * sizeof(long));
4947         for (i=0; i<num_msgs; ++i) {
4948                 extract_token(msgtok, msgset, i, ',', sizeof msgtok);
4949                 msgs[i] = atol(msgtok);
4950         }
4951
4952         /*
4953          * Do the copy
4954          */
4955         err = CtdlSaveMsgPointersInRoom(targ, msgs, num_msgs, 1, NULL, 0);
4956         if (err != 0) {
4957                 cprintf("%d Cannot store message(s) in %s: error %d\n",
4958                         err, targ, err);
4959                 free(msgs);
4960                 return;
4961         }
4962
4963         /* Now delete the message from the source room,
4964          * if this is a 'move' rather than a 'copy' operation.
4965          */
4966         if (is_copy == 0) {
4967                 CtdlDeleteMessages(CC->room.QRname, msgs, num_msgs, "");
4968         }
4969         free(msgs);
4970
4971         cprintf("%d Message(s) %s.\n", CIT_OK, (is_copy ? "copied" : "moved") );
4972 }
4973
4974
4975
4976 /*
4977  * GetMetaData()  -  Get the supplementary record for a message
4978  */
4979 void GetMetaData(struct MetaData *smibuf, long msgnum)
4980 {
4981
4982         struct cdbdata *cdbsmi;
4983         long TheIndex;
4984
4985         memset(smibuf, 0, sizeof(struct MetaData));
4986         smibuf->meta_msgnum = msgnum;
4987         smibuf->meta_refcount = 1;      /* Default reference count is 1 */
4988
4989         /* Use the negative of the message number for its supp record index */
4990         TheIndex = (0L - msgnum);
4991
4992         cdbsmi = cdb_fetch(CDB_MSGMAIN, &TheIndex, sizeof(long));
4993         if (cdbsmi == NULL) {
4994                 return;         /* record not found; go with defaults */
4995         }
4996         memcpy(smibuf, cdbsmi->ptr,
4997                ((cdbsmi->len > sizeof(struct MetaData)) ?
4998                 sizeof(struct MetaData) : cdbsmi->len));
4999         cdb_free(cdbsmi);
5000         return;
5001 }
5002
5003
5004 /*
5005  * PutMetaData()  -  (re)write supplementary record for a message
5006  */
5007 void PutMetaData(struct MetaData *smibuf)
5008 {
5009         long TheIndex;
5010
5011         /* Use the negative of the message number for the metadata db index */
5012         TheIndex = (0L - smibuf->meta_msgnum);
5013
5014         cdb_store(CDB_MSGMAIN,
5015                   &TheIndex, (int)sizeof(long),
5016                   smibuf, (int)sizeof(struct MetaData));
5017
5018 }
5019
5020 /*
5021  * AdjRefCount  -  submit an adjustment to the reference count for a message.
5022  *                 (These are just queued -- we actually process them later.)
5023  */
5024 void AdjRefCount(long msgnum, int incr)
5025 {
5026         struct arcq new_arcq;
5027         int rv = 0;
5028
5029         syslog(LOG_DEBUG, "AdjRefCount() msg %ld ref count delta %+d\n", msgnum, incr);
5030
5031         begin_critical_section(S_SUPPMSGMAIN);
5032         if (arcfp == NULL) {
5033                 arcfp = fopen(file_arcq, "ab+");
5034                 chown(file_arcq, CTDLUID, (-1));
5035                 chmod(file_arcq, 0600);
5036         }
5037         end_critical_section(S_SUPPMSGMAIN);
5038
5039         /* msgnum < 0 means that we're trying to close the file */
5040         if (msgnum < 0) {
5041                 syslog(LOG_DEBUG, "Closing the AdjRefCount queue file\n");
5042                 begin_critical_section(S_SUPPMSGMAIN);
5043                 if (arcfp != NULL) {
5044                         fclose(arcfp);
5045                         arcfp = NULL;
5046                 }
5047                 end_critical_section(S_SUPPMSGMAIN);
5048                 return;
5049         }
5050
5051         /*
5052          * If we can't open the queue, perform the operation synchronously.
5053          */
5054         if (arcfp == NULL) {
5055                 TDAP_AdjRefCount(msgnum, incr);
5056                 return;
5057         }
5058
5059         new_arcq.arcq_msgnum = msgnum;
5060         new_arcq.arcq_delta = incr;
5061         rv = fwrite(&new_arcq, sizeof(struct arcq), 1, arcfp);
5062         if (rv == -1) {
5063                 syslog(LOG_EMERG, "Couldn't write Refcount Queue File %s: %s\n",
5064                        file_arcq,
5065                        strerror(errno));
5066         }
5067         fflush(arcfp);
5068
5069         return;
5070 }
5071
5072 void AdjRefCountList(long *msgnum, long nmsg, int incr)
5073 {
5074         long i, the_size, offset;
5075         struct arcq *new_arcq;
5076         int rv = 0;
5077
5078         syslog(LOG_DEBUG, "AdjRefCountList() msg %ld ref count delta %+d\n", nmsg, incr);
5079
5080         begin_critical_section(S_SUPPMSGMAIN);
5081         if (arcfp == NULL) {
5082                 arcfp = fopen(file_arcq, "ab+");
5083                 chown(file_arcq, CTDLUID, (-1));
5084                 chmod(file_arcq, 0600);
5085         }
5086         end_critical_section(S_SUPPMSGMAIN);
5087
5088         /*
5089          * If we can't open the queue, perform the operation synchronously.
5090          */
5091         if (arcfp == NULL) {
5092                 for (i = 0; i < nmsg; i++)
5093                         TDAP_AdjRefCount(msgnum[i], incr);
5094                 return;
5095         }
5096
5097         the_size = sizeof(struct arcq) * nmsg;
5098         new_arcq = malloc(the_size);
5099         for (i = 0; i < nmsg; i++) {
5100                 new_arcq[i].arcq_msgnum = msgnum[i];
5101                 new_arcq[i].arcq_delta = incr;
5102         }
5103         rv = 0;
5104         offset = 0;
5105         while ((rv >= 0) && (offset < the_size))
5106         {
5107                 rv = fwrite(new_arcq + offset, 1, the_size - offset, arcfp);
5108                 if (rv == -1) {
5109                         syslog(LOG_EMERG, "Couldn't write Refcount Queue File %s: %s\n",
5110                                file_arcq,
5111                                strerror(errno));
5112                 }
5113                 else {
5114                         offset += rv;
5115                 }
5116         }
5117         free(new_arcq);
5118         fflush(arcfp);
5119
5120         return;
5121 }
5122
5123
5124 /*
5125  * TDAP_ProcessAdjRefCountQueue()
5126  *
5127  * Process the queue of message count adjustments that was created by calls
5128  * to AdjRefCount() ... by reading the queue and calling TDAP_AdjRefCount()
5129  * for each one.  This should be an "off hours" operation.
5130  */
5131 int TDAP_ProcessAdjRefCountQueue(void)
5132 {
5133         char file_arcq_temp[PATH_MAX];
5134         int r;
5135         FILE *fp;
5136         struct arcq arcq_rec;
5137         int num_records_processed = 0;
5138
5139         snprintf(file_arcq_temp, sizeof file_arcq_temp, "%s.%04x", file_arcq, rand());
5140
5141         begin_critical_section(S_SUPPMSGMAIN);
5142         if (arcfp != NULL) {
5143                 fclose(arcfp);
5144                 arcfp = NULL;
5145         }
5146
5147         r = link(file_arcq, file_arcq_temp);
5148         if (r != 0) {
5149                 syslog(LOG_CRIT, "%s: %s\n", file_arcq_temp, strerror(errno));
5150                 end_critical_section(S_SUPPMSGMAIN);
5151                 return(num_records_processed);
5152         }
5153
5154         unlink(file_arcq);
5155         end_critical_section(S_SUPPMSGMAIN);
5156
5157         fp = fopen(file_arcq_temp, "rb");
5158         if (fp == NULL) {
5159                 syslog(LOG_CRIT, "%s: %s\n", file_arcq_temp, strerror(errno));
5160                 return(num_records_processed);
5161         }
5162
5163         while (fread(&arcq_rec, sizeof(struct arcq), 1, fp) == 1) {
5164                 TDAP_AdjRefCount(arcq_rec.arcq_msgnum, arcq_rec.arcq_delta);
5165                 ++num_records_processed;
5166         }
5167
5168         fclose(fp);
5169         r = unlink(file_arcq_temp);
5170         if (r != 0) {
5171                 syslog(LOG_CRIT, "%s: %s\n", file_arcq_temp, strerror(errno));
5172         }
5173
5174         return(num_records_processed);
5175 }
5176
5177
5178
5179 /*
5180  * TDAP_AdjRefCount  -  adjust the reference count for a message.
5181  *                      This one does it "for real" because it's called by
5182  *                      the autopurger function that processes the queue
5183  *                      created by AdjRefCount().   If a message's reference
5184  *                      count becomes zero, we also delete the message from
5185  *                      disk and de-index it.
5186  */
5187 void TDAP_AdjRefCount(long msgnum, int incr)
5188 {
5189
5190         struct MetaData smi;
5191         long delnum;
5192
5193         /* This is a *tight* critical section; please keep it that way, as
5194          * it may get called while nested in other critical sections.
5195          * Complicating this any further will surely cause deadlock!
5196          */
5197         begin_critical_section(S_SUPPMSGMAIN);
5198         GetMetaData(&smi, msgnum);
5199         smi.meta_refcount += incr;
5200         PutMetaData(&smi);
5201         end_critical_section(S_SUPPMSGMAIN);
5202         syslog(LOG_DEBUG, "TDAP_AdjRefCount() msg %ld ref count delta %+d, is now %d\n",
5203                msgnum, incr, smi.meta_refcount
5204                 );
5205
5206         /* If the reference count is now zero, delete the message
5207          * (and its supplementary record as well).
5208          */
5209         if (smi.meta_refcount == 0) {
5210                 syslog(LOG_DEBUG, "Deleting message <%ld>\n", msgnum);
5211
5212                 /* Call delete hooks with NULL room to show it has gone altogether */
5213                 PerformDeleteHooks(NULL, msgnum);
5214
5215                 /* Remove from message base */
5216                 delnum = msgnum;
5217                 cdb_delete(CDB_MSGMAIN, &delnum, (int)sizeof(long));
5218                 cdb_delete(CDB_BIGMSGS, &delnum, (int)sizeof(long));
5219
5220                 /* Remove metadata record */
5221                 delnum = (0L - msgnum);
5222                 cdb_delete(CDB_MSGMAIN, &delnum, (int)sizeof(long));
5223         }
5224
5225 }
5226
5227 /*
5228  * Write a generic object to this room
5229  *
5230  * Note: this could be much more efficient.  Right now we use two temporary
5231  * files, and still pull the message into memory as with all others.
5232  */
5233 void CtdlWriteObject(char *req_room,                    /* Room to stuff it in */
5234                      char *content_type,                /* MIME type of this object */
5235                      char *raw_message,         /* Data to be written */
5236                      off_t raw_length,          /* Size of raw_message */
5237                      struct ctdluser *is_mailbox,       /* Mailbox room? */
5238                      int is_binary,                     /* Is encoding necessary? */
5239                      int is_unique,                     /* Del others of this type? */
5240                      unsigned int flags         /* Internal save flags */
5241         )
5242 {
5243
5244         struct ctdlroom qrbuf;
5245         char roomname[ROOMNAMELEN];
5246         struct CtdlMessage *msg;
5247         char *encoded_message = NULL;
5248
5249         if (is_mailbox != NULL) {
5250                 CtdlMailboxName(roomname, sizeof roomname, is_mailbox, req_room);
5251         }
5252         else {
5253                 safestrncpy(roomname, req_room, sizeof(roomname));
5254         }
5255
5256         syslog(LOG_DEBUG, "Raw length is %ld\n", (long)raw_length);
5257
5258         if (is_binary) {
5259                 encoded_message = malloc((size_t) (((raw_length * 134) / 100) + 4096 ) );
5260         }
5261         else {
5262                 encoded_message = malloc((size_t)(raw_length + 4096));
5263         }
5264
5265         sprintf(encoded_message, "Content-type: %s\n", content_type);
5266
5267         if (is_binary) {
5268                 sprintf(&encoded_message[strlen(encoded_message)],
5269                         "Content-transfer-encoding: base64\n\n"
5270                         );
5271         }
5272         else {
5273                 sprintf(&encoded_message[strlen(encoded_message)],
5274                         "Content-transfer-encoding: 7bit\n\n"
5275                         );
5276         }
5277
5278         if (is_binary) {
5279                 CtdlEncodeBase64(
5280                         &encoded_message[strlen(encoded_message)],
5281                         raw_message,
5282                         (int)raw_length,
5283                         0
5284                         );
5285         }
5286         else {
5287                 memcpy(
5288                         &encoded_message[strlen(encoded_message)],
5289                         raw_message,
5290                         (int)(raw_length+1)
5291                         );
5292         }
5293
5294         syslog(LOG_DEBUG, "Allocating\n");
5295         msg = malloc(sizeof(struct CtdlMessage));
5296         memset(msg, 0, sizeof(struct CtdlMessage));
5297         msg->cm_magic = CTDLMESSAGE_MAGIC;
5298         msg->cm_anon_type = MES_NORMAL;
5299         msg->cm_format_type = 4;
5300         msg->cm_fields['A'] = strdup(CC->user.fullname);
5301         msg->cm_fields['O'] = strdup(req_room);
5302         msg->cm_fields['N'] = strdup(config.c_nodename);
5303         msg->cm_fields['H'] = strdup(config.c_humannode);
5304         msg->cm_flags = flags;
5305
5306         msg->cm_fields['M'] = encoded_message;
5307
5308         /* Create the requested room if we have to. */
5309         if (CtdlGetRoom(&qrbuf, roomname) != 0) {
5310                 CtdlCreateRoom(roomname,
5311                                ( (is_mailbox != NULL) ? 5 : 3 ),
5312                                "", 0, 1, 0, VIEW_BBS);
5313         }
5314         /* If the caller specified this object as unique, delete all
5315          * other objects of this type that are currently in the room.
5316          */
5317         if (is_unique) {
5318                 syslog(LOG_DEBUG, "Deleted %d other msgs of this type\n",
5319                        CtdlDeleteMessages(roomname, NULL, 0, content_type)
5320                         );
5321         }
5322         /* Now write the data */
5323         CtdlSubmitMsg(msg, NULL, roomname, 0);
5324         CtdlFreeMessage(msg);
5325 }
5326
5327
5328
5329
5330
5331
5332 void CtdlGetSysConfigBackend(long msgnum, void *userdata) {
5333         config_msgnum = msgnum;
5334 }
5335
5336
5337 char *CtdlGetSysConfig(char *sysconfname) {
5338         char hold_rm[ROOMNAMELEN];
5339         long msgnum;
5340         char *conf;
5341         struct CtdlMessage *msg;
5342         char buf[SIZ];
5343
5344         strcpy(hold_rm, CC->room.QRname);
5345         if (CtdlGetRoom(&CC->room, SYSCONFIGROOM) != 0) {
5346                 CtdlGetRoom(&CC->room, hold_rm);
5347                 return NULL;
5348         }
5349
5350
5351         /* We want the last (and probably only) config in this room */
5352         begin_critical_section(S_CONFIG);
5353         config_msgnum = (-1L);
5354         CtdlForEachMessage(MSGS_LAST, 1, NULL, sysconfname, NULL,
5355                            CtdlGetSysConfigBackend, NULL);
5356         msgnum = config_msgnum;
5357         end_critical_section(S_CONFIG);
5358
5359         if (msgnum < 0L) {
5360                 conf = NULL;
5361         }
5362         else {
5363                 msg = CtdlFetchMessage(msgnum, 1);
5364                 if (msg != NULL) {
5365                         conf = strdup(msg->cm_fields['M']);
5366                         CtdlFreeMessage(msg);
5367                 }
5368                 else {
5369                         conf = NULL;
5370                 }
5371         }
5372
5373         CtdlGetRoom(&CC->room, hold_rm);
5374
5375         if (conf != NULL) do {
5376                         extract_token(buf, conf, 0, '\n', sizeof buf);
5377                         strcpy(conf, &conf[strlen(buf)+1]);
5378                 } while ( (!IsEmptyStr(conf)) && (!IsEmptyStr(buf)) );
5379
5380         return(conf);
5381 }
5382
5383
5384 void CtdlPutSysConfig(char *sysconfname, char *sysconfdata) {
5385         CtdlWriteObject(SYSCONFIGROOM, sysconfname, sysconfdata, (strlen(sysconfdata)+1), NULL, 0, 1, 0);
5386 }
5387
5388
5389 /*
5390  * Determine whether a given Internet address belongs to the current user
5391  */
5392 int CtdlIsMe(char *addr, int addr_buf_len)
5393 {
5394         struct recptypes *recp;
5395         int i;
5396
5397         recp = validate_recipients(addr, NULL, 0);
5398         if (recp == NULL) return(0);
5399
5400         if (recp->num_local == 0) {
5401                 free_recipients(recp);
5402                 return(0);
5403         }
5404
5405         for (i=0; i<recp->num_local; ++i) {
5406                 extract_token(addr, recp->recp_local, i, '|', addr_buf_len);
5407                 if (!strcasecmp(addr, CC->user.fullname)) {
5408                         free_recipients(recp);
5409                         return(1);
5410                 }
5411         }
5412
5413         free_recipients(recp);
5414         return(0);
5415 }
5416
5417
5418 /*
5419  * Citadel protocol command to do the same
5420  */
5421 void cmd_isme(char *argbuf) {
5422         char addr[256];
5423
5424         if (CtdlAccessCheck(ac_logged_in)) return;
5425         extract_token(addr, argbuf, 0, '|', sizeof addr);
5426
5427         if (CtdlIsMe(addr, sizeof addr)) {
5428                 cprintf("%d %s\n", CIT_OK, addr);
5429         }
5430         else {
5431                 cprintf("%d Not you.\n", ERROR + ILLEGAL_VALUE);
5432         }
5433
5434 }
5435
5436
5437 /*****************************************************************************/
5438 /*                      MODULE INITIALIZATION STUFF                          */
5439 /*****************************************************************************/
5440
5441 CTDL_MODULE_INIT(msgbase)
5442 {
5443         if (!threading) {
5444                 CtdlRegisterProtoHook(cmd_msgs, "MSGS", "Output a list of messages in the current room");
5445                 CtdlRegisterProtoHook(cmd_msg0, "MSG0", "Output a message in plain text format");
5446                 CtdlRegisterProtoHook(cmd_msg2, "MSG2", "Output a message in RFC822 format");
5447                 CtdlRegisterProtoHook(cmd_msg3, "MSG3", "Output a message in raw format (deprecated)");
5448                 CtdlRegisterProtoHook(cmd_msg4, "MSG4", "Output a message in the client's preferred format");
5449                 CtdlRegisterProtoHook(cmd_msgp, "MSGP", "Select preferred format for MSG4 output");
5450                 CtdlRegisterProtoHook(cmd_opna, "OPNA", "Open an attachment for download");
5451                 CtdlRegisterProtoHook(cmd_dlat, "DLAT", "Download an attachment");
5452                 CtdlRegisterProtoHook(cmd_ent0, "ENT0", "Enter a message");
5453                 CtdlRegisterProtoHook(cmd_dele, "DELE", "Delete a message");
5454                 CtdlRegisterProtoHook(cmd_move, "MOVE", "Move or copy a message to another room");
5455                 CtdlRegisterProtoHook(cmd_isme, "ISME", "Determine whether an email address belongs to a user");
5456         }
5457
5458         /* return our Subversion id for the Log */
5459         return "msgbase";
5460 }