webcit/useredit.c

   1 /*
   2  * Administrative screen to add/change/delete user accounts
   3  *
   4  */
   5
   6
   7 #include <ctype.h>
   8 #include <stdlib.h>
   9 #include <unistd.h>
  10 #include <stdio.h>
  11 #include <fcntl.h>
  12 #include <signal.h>
  13 #include <sys/types.h>
  14 #include <sys/wait.h>
  15 #include <sys/socket.h>
  16 #include <sys/time.h>
  17 #include <limits.h>
  18 #include <netinet/in.h>
  19 #include <netdb.h>
  20 #include <string.h>
  21 #include <pwd.h>
  22 #include <errno.h>
  23 #include <stdarg.h>
  24 #include <pthread.h>
  25 #include <signal.h>
  26 #include "webcit.h"
  27 #include "webserver.h"
  28
  29
  30
  31
  32
  33 void select_user_to_edit(char *message, char *preselect)
  34 {
  35         char buf[SIZ];
  36         char username[SIZ];
  37
  38         output_headers(1, 1, 0, 0, 0, 0, 0);    /* No room banner on this screen */
  39
  40         if (message != NULL) wprintf(message);
  41
  42         wprintf("<TABLE border=0 CELLSPACING=10><TR VALIGN=TOP><TD>\n");
  43
  44         svprintf("BOXTITLE", WCS_STRING, "Edit or Delete users");
  45         do_template("beginbox");
  46
  47         wprintf("To edit an existing user account, select the user "
  48                 "name from the list and click 'Edit'.<br /><br />");
  49
  50         wprintf("<CENTER>"
  51                 "<FORM METHOD=\"POST\" ACTION=\"/display_edituser\">\n");
  52         wprintf("<SELECT NAME=\"username\" SIZE=10>\n");
  53         serv_puts("LIST");
  54         serv_gets(buf);
  55         if (buf[0] == '1') {
  56                 while (serv_gets(buf), strcmp(buf, "000")) {
  57                         extract(username, buf, 0);
  58                         wprintf("<OPTION");
  59                         if (preselect != NULL)
  60                            if (!strcasecmp(username, preselect))
  61                               wprintf(" SELECTED");
  62                         wprintf(">");
  63                         escputs(username);
  64                         wprintf("\n");
  65                 }
  66         }
  67         wprintf("</SELECT><br />\n");
  68
  69         wprintf("<input type=submit name=sc value=\"Edit configuration\">");
  70         wprintf("<input type=submit name=sc value=\"Edit address book entry\">");
  71         wprintf("</FORM></CENTER>\n");
  72         do_template("endbox");
  73
  74         wprintf("</TD><TD>");
  75
  76         svprintf("BOXTITLE", WCS_STRING, "Add users");
  77         do_template("beginbox");
  78
  79         wprintf("To create a new user account, enter the desired "
  80                 "user name in the box below and click 'Create'.<br /><br />");
  81
  82         wprintf("<CENTER><FORM METHOD=\"POST\" ACTION=\"/create_user\">\n");
  83         wprintf("New user: ");
  84         wprintf("<input type=text name=username><br />\n"
  85                 "<input type=submit value=\"Create\">"
  86                 "</FORM></CENTER>\n");
  87
  88         do_template("endbox");
  89         wprintf("</TD></TR></TABLE>\n");
  90
  91         wDumpContent(1);
  92 }
  93
  94
  95
  96 /*
  97  * Locate the message number of a user's vCard in the current room
  98  */
  99 long locate_user_vcard(char *username, long usernum) {
 100         char buf[SIZ];
 101         long vcard_msgnum = (-1L);
 102         char content_type[SIZ];
 103         char partnum[SIZ];
 104         int already_tried_creating_one = 0;
 105
 106         struct stuff_t {
 107                 struct stuff_t *next;
 108                 long msgnum;
 109         };
 110
 111         struct stuff_t *stuff = NULL;
 112         struct stuff_t *ptr;
 113
 114 TRYAGAIN:
 115         /* Search for the user's vCard */
 116         serv_puts("MSGS ALL");
 117         serv_gets(buf);
 118         if (buf[0] == '1') while (serv_gets(buf), strcmp(buf, "000")) {
 119                 ptr = malloc(sizeof(struct stuff_t));
 120                 ptr->msgnum = atol(buf);
 121                 ptr->next = stuff;
 122                 stuff = ptr;
 123         }
 124
 125         /* Iterate through the message list looking for vCards */
 126         while (stuff != NULL) {
 127                 serv_printf("MSG0 %ld|2", stuff->msgnum);
 128                 serv_gets(buf);
 129                 if (buf[0]=='1') {
 130                         while(serv_gets(buf), strcmp(buf, "000")) {
 131                                 if (!strncasecmp(buf, "part=", 5)) {
 132                                         extract(partnum, &buf[5], 2);
 133                                         extract(content_type, &buf[5], 4);
 134                                         if (!strcasecmp(content_type,
 135                                            "text/x-vcard")) {
 136                                                 vcard_msgnum = stuff->msgnum;
 137                                         }
 138                                 }
 139                         }
 140                 }
 141
 142                 ptr = stuff->next;
 143                 free(stuff);
 144                 stuff = ptr;
 145         }
 146
 147         /* If there's no vcard, create one */
 148         if (vcard_msgnum < 0) if (already_tried_creating_one == 0) {
 149                 already_tried_creating_one = 1;
 150                 serv_puts("ENT0 1|||4");
 151                 serv_gets(buf);
 152                 if (buf[0] == '4') {
 153                         serv_puts("Content-type: text/x-vcard");
 154                         serv_puts("");
 155                         serv_puts("begin:vcard");
 156                         serv_puts("end:vcard");
 157                         serv_puts("000");
 158                 }
 159                 goto TRYAGAIN;
 160         }
 161
 162         return(vcard_msgnum);
 163 }
 164
 165
 166 /*
 167  * Display the form for editing a user's address book entry
 168  */
 169 void display_edit_address_book_entry(char *username, long usernum) {
 170         char roomname[SIZ];
 171         char buf[SIZ];
 172         char error_message[SIZ];
 173         long vcard_msgnum = (-1L);
 174
 175         /* Locate the user's config room, creating it if necessary */
 176         sprintf(roomname, "%010ld.%s", usernum, USERCONFIGROOM);
 177         serv_printf("GOTO %s||1", roomname);
 178         serv_gets(buf);
 179         if (buf[0] != '2') {
 180                 serv_printf("CRE8 1|%s|5|||1|", roomname);
 181                 serv_gets(buf);
 182                 serv_printf("GOTO %s||1", roomname);
 183                 serv_gets(buf);
 184                 if (buf[0] != '2') {
 185                         sprintf(error_message,
 186                                 "<IMG SRC=\"static/error.gif\" ALIGN=CENTER>"
 187                                 "%s<br /><br />\n", &buf[4]);
 188                         select_user_to_edit(error_message, username);
 189                         return;
 190                 }
 191         }
 192
 193         vcard_msgnum = locate_user_vcard(username, usernum);
 194
 195         if (vcard_msgnum < 0) {
 196                 sprintf(error_message,
 197                         "<IMG SRC=\"static/error.gif\" ALIGN=CENTER>"
 198                         "Could not create/edit vCard"
 199                         "<br /><br />\n"
 200                 );
 201                 select_user_to_edit(error_message, username);
 202                 return;
 203         }
 204
 205         do_edit_vcard(vcard_msgnum, "1", "/select_user_to_edit");
 206 }
 207
 208
 209
 210
 211 /*
 212  * Edit a user.  If supplied_username is null, look in the "username"
 213  * web variable for the name of the user to edit.
 214  *
 215  * If "is_new" is set to nonzero, this screen will set the web variables
 216  * to send the user to the vCard editor next.
 217  */
 218 void display_edituser(char *supplied_username, int is_new) {
 219         char buf[SIZ];
 220         char error_message[SIZ];
 221         time_t now;
 222
 223         char username[SIZ];
 224         char password[SIZ];
 225         unsigned int flags;
 226         int timescalled;
 227         int msgsposted;
 228         int axlevel;
 229         long usernum;
 230         time_t lastcall;
 231         int purgedays;
 232         int i;
 233
 234         if (supplied_username != NULL) {
 235                 strcpy(username, supplied_username);
 236         }
 237         else {
 238                 strcpy(username, bstr("username") );
 239         }
 240
 241         serv_printf("AGUP %s", username);
 242         serv_gets(buf);
 243         if (buf[0] != '2') {
 244                 sprintf(error_message,
 245                         "<IMG SRC=\"static/error.gif\" ALIGN=CENTER>"
 246                         "%s<br /><br />\n", &buf[4]);
 247                 select_user_to_edit(error_message, username);
 248                 return;
 249         }
 250
 251         extract(username, &buf[4], 0);
 252         extract(password, &buf[4], 1);
 253         flags = extract_int(&buf[4], 2);
 254         timescalled = extract_int(&buf[4], 3);
 255         msgsposted = extract_int(&buf[4], 4);
 256         axlevel = extract_int(&buf[4], 5);
 257         usernum = extract_long(&buf[4], 6);
 258         lastcall = extract_long(&buf[4], 7);
 259         purgedays = extract_long(&buf[4], 8);
 260
 261         if (!strcmp(bstr("sc"), "Edit address book entry")) {
 262                 display_edit_address_book_entry(username, usernum);
 263                 return;
 264         }
 265
 266         output_headers(1, 1, 2, 0, 0, 0, 0);
 267         wprintf("<div id=\"banner\">\n");
 268         wprintf("<TABLE WIDTH=100%% BORDER=0 BGCOLOR=\"#444455\"><TR><TD>");
 269         wprintf("<SPAN CLASS=\"titlebar\">"
 270                 "Edit user account: ");
 271         escputs(username);
 272         wprintf("</SPAN></TD></TR></TABLE>\n");
 273         wprintf("</div>\n<div id=\"content\">\n");
 274
 275         do_template("beginbox_nt");
 276         wprintf("<FORM METHOD=\"POST\" ACTION=\"/edituser\">\n"
 277                 "<INPUT TYPE=\"hidden\" NAME=\"username\" VALUE=\"");
 278         escputs(username);
 279         wprintf("\">\n");
 280         wprintf("<INPUT TYPE=\"hidden\" NAME=\"is_new\" VALUE=\"%d\">\n"
 281                 "<INPUT TYPE=\"hidden\" NAME=\"usernum\" VALUE=\"%ld\">\n",
 282                 is_new, usernum);
 283
 284         wprintf("<INPUT TYPE=\"hidden\" NAME=\"flags\" VALUE=\"%d\">\n", flags);
 285
 286         wprintf("<CENTER><TABLE>");
 287
 288         wprintf("<TR><TD>Password</TD><TD>"
 289                 "<INPUT TYPE=\"password\" NAME=\"password\" VALUE=\"");
 290         escputs(password);
 291         wprintf("\" MAXLENGTH=\"20\"></TD></TR>\n");
 292
 293         wprintf("<TR><TD>Times logged in</TD><TD>"
 294                 "<INPUT TYPE=\"text\" NAME=\"timescalled\" VALUE=\"");
 295         wprintf("%d", timescalled);
 296         wprintf("\" MAXLENGTH=\"6\"></TD></TR>\n");
 297
 298         wprintf("<TR><TD>Messages posted</TD><TD>"
 299                 "<INPUT TYPE=\"text\" NAME=\"msgsposted\" VALUE=\"");
 300         wprintf("%d", msgsposted);
 301         wprintf("\" MAXLENGTH=\"6\"></TD></TR>\n");
 302
 303         wprintf("<TR><TD>Access level</TD><TD>"
 304                 "<SELECT NAME=\"axlevel\">\n");
 305         for (i=0; i<7; ++i) {
 306                 wprintf("<OPTION ");
 307                 if (axlevel == i) {
 308                         wprintf("SELECTED ");
 309                 }
 310                 wprintf("VALUE=\"%d\">%d - %s</OPTION>\n",
 311                         i, i, axdefs[i]);
 312         }
 313         wprintf("</SELECT></TD></TR>\n");
 314
 315         wprintf("<TR><TD>User ID number</TD><TD>"
 316                 "<INPUT TYPE=\"text\" NAME=\"usernum\" VALUE=\"");
 317         wprintf("%ld", usernum);
 318         wprintf("\" MAXLENGTH=\"7\"></TD></TR>\n");
 319
 320         now = time(NULL);
 321         wprintf("<TR><TD>Date/time of last login</TD><TD>"
 322                 "<SELECT NAME=\"lastcall\">\n");
 323
 324         wprintf("<OPTION SELECTED VALUE=\"%ld\">", lastcall);
 325         escputs(asctime(localtime(&lastcall)));
 326         wprintf("</OPTION>\n");
 327
 328         wprintf("<OPTION VALUE=\"%ld\">", now);
 329         escputs(asctime(localtime(&now)));
 330         wprintf("</OPTION>\n");
 331
 332         wprintf("</SELECT></TD></TR>");
 333
 334         wprintf("<TR><TD>Auto-purge after days</TD><TD>"
 335                 "<INPUT TYPE=\"text\" NAME=\"purgedays\" VALUE=\"");
 336         wprintf("%d", purgedays);
 337         wprintf("\" MAXLENGTH=\"5\"></TD></TR>\n");
 338
 339         wprintf("</TABLE>\n");
 340
 341         wprintf("<INPUT type=\"submit\" NAME=\"action\" VALUE=\"OK\">\n"
 342                 "&nbsp;"
 343                 "<INPUT type=\"submit\" NAME=\"action\" VALUE=\"Cancel\">\n"
 344                 "<br /><br /></FORM>\n");
 345
 346         wprintf("</CENTER>\n");
 347         do_template("endbox");
 348
 349         wDumpContent(1);
 350
 351 }
 352
 353
 354
 355 void edituser(void) {
 356         char message[SIZ];
 357         char buf[SIZ];
 358         int is_new = 0;
 359
 360         is_new = atoi(bstr("is_new"));
 361
 362         if (strcasecmp(bstr("action"), "OK")) {
 363                 strcpy(message, "Edit user cancelled.");
 364         }
 365
 366         else {
 367
 368                 serv_printf("ASUP %s|%s|%s|%s|%s|%s|%s|%s|%s|",
 369                         bstr("username"),
 370                         bstr("password"),
 371                         bstr("flags"),
 372                         bstr("timescalled"),
 373                         bstr("msgsposted"),
 374                         bstr("axlevel"),
 375                         bstr("usernum"),
 376                         bstr("lastcall"),
 377                         bstr("purgedays")
 378                 );
 379                 serv_gets(buf);
 380                 if (buf[0] != '2') {
 381                         sprintf(message,
 382                                 "<IMG SRC=\"static/error.gif\" ALIGN=CENTER>"
 383                                 "%s<br /><br />\n", &buf[4]);
 384                 }
 385                 else {
 386                         strcpy(message, "");
 387                 }
 388         }
 389
 390         /* If we are in the middle of creating a new user, move on to
 391          * the vCard edit screen.
 392          */
 393         if (is_new) {
 394                 display_edit_address_book_entry( bstr("username"), atol(bstr("usernum")) );
 395         }
 396         else {
 397                 select_user_to_edit(message, bstr("username"));
 398         }
 399 }
 400
 401
 402
 403
 404 void create_user(void) {
 405         char buf[SIZ];
 406         char error_message[SIZ];
 407         char username[SIZ];
 408
 409         strcpy(username, bstr("username"));
 410
 411         serv_printf("CREU %s", username);
 412         serv_gets(buf);
 413
 414         if (buf[0] == '2') {
 415                 /* sprintf(error_message, "<b>User has been created.</b>");
 416                 select_user_to_edit(error_message, username); */
 417                 display_edituser(username, 1);
 418         }
 419         else {
 420                 sprintf(error_message,
 421                         "<IMG SRC=\"static/error.gif\" ALIGN=CENTER>"
 422                         "%s<br /><br />\n", &buf[4]);
 423                 select_user_to_edit(error_message, NULL);
 424         }
 425
 426 }
 427