Nearly all <FORM> blocks now contain a hidden input
[citadel.git] / webcit / listsub.c
index 0d70d08f9148d6a2f90884bbe38f8ef575b2b486..2000c3c181a7bc18890e8a66bdef9eaab422ba5b 100644 (file)
@@ -1,34 +1,48 @@
 /*
  * $Id$
- *
- * Web forms for handling mailing list subscribe/unsubscribe requests.
- *
+ */
+/**
+ * \defgroup ListSubForms Web forms for handling mailing list subscribe/unsubscribe requests.
+ * \ingroup WebcitDisplayItems
  */
 
+/*@{*/
 #include "webcit.h"
 
 
 
-/*
- * List subscription handling
+/**
+ * \brief List subscription handling
  */
 void do_listsub(void)
 {
-       char cmd[SIZ];
-       char room[SIZ];
-       char token[SIZ];
-       char email[SIZ];
-       char subtype[SIZ];
+       char cmd[256];
+       char room[256];
+       char token[256];
+       char email[256];
+       char subtype[256];
+       char escaped_email[256];
+       char escaped_room[256];
 
        char buf[SIZ];
        int self;
        char sroom[SIZ];
 
+       strcpy(WC->wc_fullname, "");
        strcpy(WC->wc_username, "");
        strcpy(WC->wc_password, "");
        strcpy(WC->wc_roomname, "");
 
-       wprintf("<HTML><HEAD><TITLE>List subscription</TITLE></HEAD><BODY>\n");
+       output_headers(1, 0, 0, 1, 1, 0);
+       begin_burst();
+
+       wprintf("<HTML><HEAD>\n"
+               "<meta name=\"MSSmartTagsPreventParsing\" content=\"TRUE\" />\n"
+               "<link href=\"static/webcit.css\" rel=\"stylesheet\" type=\"text/css\">\n"
+               "<TITLE>\n"
+       );
+       wprintf(_("List subscription"));
+       wprintf("</TITLE></HEAD><BODY>\n");
 
        strcpy(cmd, bstr("cmd"));
        strcpy(room, bstr("room"));
@@ -37,29 +51,33 @@ void do_listsub(void)
        strcpy(subtype, bstr("subtype"));
 
        wprintf("<CENTER>"
-               "<TABLE WIDTH=100%% BORDER=0 BGCOLOR=\"#444455\"><TR><TD>"
-               "<SPAN CLASS=\"titlebar\">List subscribe/unsubscribe</SPAN>\n"
-               "</TD></TR></TABLE><br />\n"
-       );
+               "<TABLE class=\"listsub_banner\"><TR><TD>"
+               "<SPAN CLASS=\"titlebar\">");
+       wprintf(_("List subscribe/unsubscribe"));
+       wprintf("</SPAN></TD></TR></TABLE><br />\n");
 
-       /*
+       /**
         * Subscribe command
         */
        if (!strcasecmp(cmd, "subscribe")) {
-               serv_printf("SUBS subscribe|%s|%s|%s|%s/listsub",
+               serv_printf("SUBS subscribe|%s|%s|%s|%s://%s/listsub",
                        room,
                        email,
                        subtype,
+                       (is_https ? "https" : "http"),
                        WC->http_host
                );
                serv_getln(buf, sizeof buf);
                if (buf[0] == '2') {
-                       wprintf("<CENTER><H1>Confirmation request sent</H1>"
-                               "You are subscribing <TT>");
-                       escputs(email);
-                       wprintf("</TT> to the &quot;");
-                       escputs(room);
-                       wprintf("&quot; mailing list.  The listserver has "
+                       stresc(escaped_email, email, 0, 0);
+                       stresc(escaped_room, room, 0, 0);
+
+                       wprintf("<CENTER><H1>");
+                       wprintf(_("Confirmation request sent"));
+                       wprintf("</H1>");
+                       wprintf(_("You are subscribing <TT>%s"
+                               "</TT> to the <b>%s</b> mailing list.  "
+                               "The listserver has "
                                "sent you an e-mail with one additional "
                                "Web link for you to click on to confirm "
                                "your subscription.  This extra step is for "
@@ -68,9 +86,9 @@ void do_listsub(void)
                                "without your consent.<br /><br />"
                                "Please click on the link which is being "
                                "e-mailed to you and your subscription will "
-                               "be confirmed.<br />\n"
-                               "<A HREF=\"/listsub\">Back...</A></CENTER>\n"
-                       );
+                               "be confirmed.<br />\n"),
+                               escaped_email, escaped_room);
+                       wprintf("<a href=\"listsub\">%s</A></CENTER>\n", _("Go back..."));
                }
                else {
                        wprintf("<FONT SIZE=+1><B>ERROR: %s</B>"
@@ -80,13 +98,14 @@ void do_listsub(void)
                }
        }
 
-       /*
+       /**
         * Unsubscribe command
         */
        else if (!strcasecmp(cmd, "unsubscribe")) {
-               serv_printf("SUBS unsubscribe|%s|%s|%s/listsub",
+               serv_printf("SUBS unsubscribe|%s|%s|%s://%s/listsub",
                        room,
                        email,
+                       (is_https ? "https" : "http"),
                        WC->http_host
                );
                serv_getln(buf, sizeof buf);
@@ -106,7 +125,7 @@ void do_listsub(void)
                                "Please click on the link which is being "
                                "e-mailed to you and your unsubscription will "
                                "be confirmed.<br />\n"
-                               "<A HREF=\"/listsub\">Back...</A></CENTER>\n"
+                               "<a href=\"listsub\">Back...</A></CENTER>\n"
                        );
                }
                else {
@@ -117,7 +136,7 @@ void do_listsub(void)
                }
        }
 
-       /* 
+       /**
         * Confirm command
         */
        else if (!strcasecmp(cmd, "confirm")) {
@@ -145,13 +164,13 @@ void do_listsub(void)
                wprintf("%s</CENTER><br />\n", &buf[4]);
        }
 
-       /*
+       /**
         * Any other (invalid) command causes the form to be displayed
         */
        else {
-FORM:          wprintf("<FORM METHOD=\"POST\" ACTION=\"/listsub\">\n"
-                       "<TABLE BORDER=0>\n"
-               );
+FORM:          wprintf("<FORM METHOD=\"POST\" action=\"listsub\">\n");
+               wprintf("<input type=\"hidden\" name=\"nonce\" value=\"%ld\">\n", WC->nonce);
+               wprintf("<TABLE BORDER=0>\n");
 
                wprintf("<TR><TD>Name of list</TD><TD>"
                        "<SELECT NAME=\"room\" SIZE=1>\n");
@@ -183,10 +202,10 @@ FORM:             wprintf("<FORM METHOD=\"POST\" ACTION=\"/listsub\">\n"
 
                wprintf("</TABLE>"
                        "(If subscribing) preferred format: "
-                       "<INPUT TYPE=\"radio\" NAME=\"subtype\""
-                       "VALUE=\"list\">One message at a time&nbsp; "
-                       "<INPUT TYPE=\"radio\" NAME=\"subtype\""
-                       "VALUE=\"digest\" CHECKED>Digest format&nbsp; "
+                       "<INPUT TYPE=\"radio\" NAME=\"subtype\" "
+                       "VALUE=\"list\" CHECKED>One message at a time&nbsp; "
+                       "<INPUT TYPE=\"radio\" NAME=\"subtype\" "
+                       "VALUE=\"digest\">Digest format&nbsp; "
                        "<br />\n"
                        "<INPUT TYPE=\"submit\" NAME=\"cmd\""
                        " VALUE=\"subscribe\">\n"
@@ -205,11 +224,11 @@ FORM:             wprintf("<FORM METHOD=\"POST\" ACTION=\"/listsub\">\n"
 
        }
 
-       /*
-        * Since this isn't part of a normal Citadel session, we bail right
-        * out without maintaining any state.
-        */
-       /* wDumpContent(2); */
        wprintf("</BODY></HTML>\n");
+       wDumpContent(0);
        end_webcit_session();
 }
+
+
+
+/*@}*/