4 * This module handles self-service subscription/unsubscription to mail lists.
6 * Copyright (C) 2002 by Art Cancro and others.
7 * This code is released under the terms of the GNU General Public License.
20 #include <sys/types.h>
22 #if TIME_WITH_SYS_TIME
23 # include <sys/time.h>
27 # include <sys/time.h>
38 #include "sysdep_decls.h"
39 #include "citserver.h"
42 #include "dynloader.h"
49 #include "internet_addressing.h"
50 #include "serv_network.h"
51 #include "clientsocket.h"
60 * Generate a randomizationalisticized token to use for authentication of
61 * a subscribe or unsubscribe request.
63 void listsub_generate_token(char *buf) {
67 /* Theo, please sit down and shut up. This key doesn't have to be
68 * tinfoil-hat secure, it just needs to be reasonably unguessable
71 sprintf(sourcebuf, "%d%d%ld",
77 /* Convert it to base64 so it looks cool */
78 encode_base64(buf, sourcebuf);
83 * Enter a subscription request
85 void do_subscribe(char *room, char *email, char *subtype, char *webpage) {
86 struct quickroom qrbuf;
90 char confirmation_request[SIZ];
92 if (getroom(&qrbuf, room) != 0) {
93 cprintf("%d There is no list called '%s'\n", ERROR, room);
97 if ((qrbuf.QRflags2 & QR2_SELFLIST) == 0) {
99 "does not accept subscribe/unsubscribe requests.\n",
100 ERROR+HIGHER_ACCESS_REQUIRED, qrbuf.QRname);
104 listsub_generate_token(token);
106 begin_critical_section(S_NETCONFIGS);
107 assoc_file_name(filename, sizeof filename, &qrbuf, "netconfigs");
108 ncfp = fopen(filename, "a");
110 fprintf(ncfp, "subpending|%s|%s|%s|%ld|%s\n",
119 end_critical_section(S_NETCONFIGS);
121 /* Generate and send the confirmation request */
123 snprintf(confirmation_request, sizeof confirmation_request,
124 "Someone (probably you) has submitted a request to subscribe\n"
125 "<%s> to the '%s' mailing list.\n\n"
126 "In order to confirm this subscription request, please\n"
127 "point your web browser at the following location:\n\n"
128 "http://%s?room=%s&token=%s\n\n"
129 "If this request has been submitted in error and you do not\n"
130 "wish to receive the '%s' mailing list, simply do nothing,\n"
131 "and you will not receive any further mailings.\n",
133 email, qrbuf.QRname, webpage, qrbuf.QRname, token, qrbuf.QRname
143 cprintf("%d Subscription entered; confirmation request sent\n", CIT_OK);
149 * Confirm a subscribe/unsubscribe request.
151 void do_confirm(char *room, char *token) {
152 struct quickroom qrbuf;
155 char line_token[SIZ];
164 if (getroom(&qrbuf, room) != 0) {
165 cprintf("%d There is no list called '%s'\n", ERROR, room);
169 if ((qrbuf.QRflags2 & QR2_SELFLIST) == 0) {
171 "does not accept subscribe/unsubscribe requests.\n",
172 ERROR+HIGHER_ACCESS_REQUIRED, qrbuf.QRname);
176 begin_critical_section(S_NETCONFIGS);
177 assoc_file_name(filename, sizeof filename, &qrbuf, "netconfigs");
178 ncfp = fopen(filename, "r+");
180 while (line_offset = ftell(ncfp),
181 (fgets(buf, sizeof buf, ncfp) != NULL) ) {
182 buf[strlen(buf)-1] = 0;
183 line_length = strlen(buf);
184 extract(cmd, buf, 0);
185 if (!strcasecmp(cmd, "subpending")) {
186 extract(email, buf, 1);
187 extract(subtype, buf, 2);
188 extract(line_token, buf, 3);
189 if (!strcasecmp(token, line_token)) {
190 if (!strcasecmp(subtype, "digest")) {
191 strcpy(buf, "digestrecp|");
194 strcpy(buf, "listrecp|");
198 /* SLEAZY HACK: pad the line out so
199 * it's the same length as the line
202 while (strlen(buf) < line_length) {
205 fseek(ncfp, line_offset, SEEK_SET);
206 fprintf(ncfp, "%s\n", buf);
213 end_critical_section(S_NETCONFIGS);
216 cprintf("%d %d operation(s) confirmed.\n", CIT_OK, success);
219 cprintf("%d Invalid token.\n", ERROR);
227 * process subscribe/unsubscribe requests and confirmations
229 void cmd_subs(char *cmdbuf) {
238 extract(opr, cmdbuf, 0);
239 if (!strcasecmp(opr, "subscribe")) {
240 extract(subtype, cmdbuf, 3);
241 if ( (strcasecmp(subtype, "list"))
242 && (strcasecmp(subtype, "digest")) ) {
243 cprintf("%d Invalid subscription type.\n", ERROR);
246 extract(room, cmdbuf, 1);
247 extract(email, cmdbuf, 2);
248 extract(webpage, cmdbuf, 4);
249 do_subscribe(room, email, subtype, webpage);
252 else if (!strcasecmp(opr, "unsubscribe")) {
253 cprintf("%d not yet implemented\n", ERROR);
255 else if (!strcasecmp(opr, "confirm")) {
256 extract(room, cmdbuf, 1);
257 extract(token, cmdbuf, 2);
258 do_confirm(room, token);
261 cprintf("%d Invalid command\n", ERROR);
269 char *Dynamic_Module_Init(void)
271 CtdlRegisterProtoHook(cmd_subs, "SUBS", "List subscribe/unsubscribe");