Cleaned up some of the comments ... removed vestiges of last year's doxygen experiment
[citadel.git] / webcit / useredit.c
index a415b869bbd5b2998b7a8c1077f58281e3ad360a..2446b3c2e9153964b22bbaf06ec291eedd8d2ca1 100644 (file)
 /*
- * Administrative screen to add/change/delete user accounts
- *
+ * $Id$
  */
 
-
-#include <ctype.h>
-#include <stdlib.h>
-#include <unistd.h>
-#include <stdio.h>
-#include <fcntl.h>
-#include <signal.h>
-#include <sys/types.h>
-#include <sys/wait.h>
-#include <sys/socket.h>
-#include <sys/time.h>
-#include <limits.h>
-#include <netinet/in.h>
-#include <netdb.h>
-#include <string.h>
-#include <pwd.h>
-#include <errno.h>
-#include <stdarg.h>
-#include <pthread.h>
-#include <signal.h>
 #include "webcit.h"
 #include "webserver.h"
 
 
-
-
-
+/**
+ *  show a list of available users to edit them
+ *  message the header message???
+ *  preselect which user should be selected in the browser
+ */
 void select_user_to_edit(char *message, char *preselect)
-{
+{/*
        char buf[SIZ];
        char username[SIZ];
+ */
+       output_headers(1, 0, 0, 0, 1, 0);
+       do_template("edituser_select", NULL);
+        end_burst();
 
-       output_headers(3);      /* No room banner on this screen */
+/*
+
+       output_headers(1, 1, 2, 0, 0, 0);
+       wprintf("<div id=\"banner\">\n");
+       wprintf("<img src=\"static/usermanag_48x.gif\">");
+        wprintf("<h1>");
+       wprintf(_("Edit or delete users"));
+        wprintf("</h1>");
+        wprintf("</div>");
+
+        wprintf("<div id=\"content\" class=\"service\">\n");
 
        if (message != NULL) wprintf(message);
 
-       wprintf("<TABLE WIDTH=100%% BORDER=0 BGCOLOR=\"#007700\"><TR><TD>");
-       wprintf("<SPAN CLASS=\"titlebar\">"
-               "Add/change/delete user accounts"
-               "</SPAN></TD></TR></TABLE>\n");
+       wprintf("<table border=0 cellspacing=10><tr valign=top><td>\n");
+
+       svput("BOXTITLE", WCS_STRING, _("Add users"));
+       do_template("beginbox", NULL);
+
+       wprintf(_("To create a new user account, enter the desired "
+               "user name in the box below and click 'Create'."));
+       wprintf("<br /><br />");
+
+        wprintf("<center><form method=\"POST\" action=\"create_user\">\n");
+       wprintf("<input type=\"hidden\" name=\"nonce\" value=\"%d\">\n", WC->nonce);
+        wprintf(_("New user: "));
+        wprintf("<input type=\"text\" name=\"username\"><br />\n"
+               "<input type=\"submit\" name=\"create_button\" value=\"%s\">"
+               "</form></center>\n", _("Create"));
+
+       do_template("endbox", NULL);
 
-       wprintf("<TABLE border=0 CELLSPACING=10><TR VALIGN=TOP>"
-               "<TD>To edit an existing user account, select the user "
-               "name from the list and click 'Edit'.<BR><BR>");
+       wprintf("</td><td>");
+
+       svput("BOXTITLE", WCS_STRING, _("Edit or Delete users"));
+       do_template("beginbox", NULL);
+
+       wprintf(_("To edit an existing user account, select the user "
+               "name from the list and click 'Edit'."));
+       wprintf("<br /><br />");
        
-        wprintf("<CENTER><FORM METHOD=\"POST\" ACTION=\"/display_edituser\">\n");
-        wprintf("<SELECT NAME=\"username\" SIZE=10>\n");
+        wprintf("<center>"
+               "<form method=\"POST\" action=\"display_edituser\">\n");
+       wprintf("<input type=\"hidden\" name=\"nonce\" value=\"%d\">\n", WC->nonce);
+        wprintf("<select name=\"username\" size=10 style=\"width:100%%\">\n");
         serv_puts("LIST");
-        serv_gets(buf);
+        serv_getln(buf, sizeof buf);
         if (buf[0] == '1') {
-                while (serv_gets(buf), strcmp(buf, "000")) {
-                        extract(username, buf, 0);
-                        wprintf("<OPTION");
+                while (serv_getln(buf, sizeof buf), strcmp(buf, "000")) {
+                        extract_token(username, buf, 0, '|', sizeof username);
+                        wprintf("<option");
                        if (preselect != NULL)
                           if (!strcasecmp(username, preselect))
-                             wprintf(" SELECTED");
+                             wprintf(" selected");
                        wprintf(">");
                         escputs(username);
                         wprintf("\n");
                 }
         }
-        wprintf("</SELECT><BR>\n");
+        wprintf("</select><br />\n");
 
-        wprintf("<input type=submit name=sc value=\"Edit configuration\">");
-        wprintf("<input type=submit name=sc value=\"Edit address book entry\">");
-        wprintf("</FORM></CENTER>\n");
+        wprintf("<input type=\"submit\" name=\"edit_config_button\" value=\"%s\">", _("Edit configuration"));
+        wprintf("<input type=\"submit\" name=\"edit_abe_button\" value=\"%s\">", _("Edit address book entry"));
+        wprintf("<input type=\"submit\" name=\"delete_button\" value=\"%s\" "
+               "onClick=\"return confirm('%s');\">", _("Delete user"), _("Delete this user?"));
+        wprintf("</form></center>\n");
+       do_template("endbox", NULL);
 
-       wprintf("</TD><TD>"
-               "To create a new user account, enter the desired "
-               "user name in the box below and click 'Create'.<BR><BR>");
+       wprintf("</td></tr></table>\n");
 
-        wprintf("<CENTER><FORM METHOD=\"POST\" ACTION=\"/create_user\">\n");
-        wprintf("New user: ");
-        wprintf("<input type=text name=username><BR>\n"
-               "<input type=submit value=\"Create\">"
-               "</FORM></CENTER>\n");
+       wDumpContent(1);
+*/
+}
 
-       wprintf("</TD></TR></TABLE>\n");
 
-       wDumpContent(1);
+typedef struct _UserListEntry {
+       int UID;
+       int AccessLevel;
+       int nLogons;
+       int nPosts;
+
+       StrBuf *UserName;
+       StrBuf *Passvoid;
+       time_t LastLogonT;
+       /* Just available for Single users to view: */
+       unsigned int Flags;
+       int DaysTillPurge;
+} UserListEntry;
+
+
+UserListEntry* NewUserListOneEntry(StrBuf *SerializedUser)
+{
+       UserListEntry *ul;
+
+       if (StrLength(SerializedUser) < 8) 
+               return NULL;
+
+       ul = (UserListEntry*) malloc(sizeof(UserListEntry));
+       ul->UserName = NewStrBuf();
+       ul->Passvoid = NewStrBuf();
+
+       StrBufExtract_token(ul->UserName, SerializedUser, 0, '|');
+       StrBufExtract_token(ul->Passvoid, SerializedUser, 1, '|');
+       ul->Flags = (unsigned int)StrBufExtract_long(SerializedUser, 2, '|');
+       ul->nLogons = StrBufExtract_int(SerializedUser, 3, '|');
+       ul->nPosts = StrBufExtract_int(SerializedUser, 4, '|');
+       ul->AccessLevel = StrBufExtract_int(SerializedUser, 5, '|');
+       ul->UID = StrBufExtract_int(SerializedUser, 6, '|');
+       ul->LastLogonT = StrBufExtract_long(SerializedUser, 7, '|');
+       ul->DaysTillPurge = StrBufExtract_int(SerializedUser, 8, '|');
+       return ul;
 }
 
+void DeleteUserListEntry(void *vUserList)
+{
+       UserListEntry *ul = (UserListEntry*) vUserList;
+       FreeStrBuf(&ul->UserName);
+       FreeStrBuf(&ul->Passvoid);
+       free(ul);
+}
 
+UserListEntry* NewUserListEntry(StrBuf *SerializedUserList)
+{
+       UserListEntry *ul;
+
+       if (StrLength(SerializedUserList) < 8) 
+               return NULL;
+
+       ul = (UserListEntry*) malloc(sizeof(UserListEntry));
+       ul->UserName = NewStrBuf();
+       ul->Passvoid = NewStrBuf();
+
+       StrBufExtract_token(ul->UserName, SerializedUserList, 0, '|');
+       ul->AccessLevel = StrBufExtract_int(SerializedUserList, 1, '|');
+       ul->UID = StrBufExtract_int(SerializedUserList, 2, '|');
+       ul->LastLogonT = StrBufExtract_long(SerializedUserList, 3, '|');
+       ul->nLogons = StrBufExtract_int(SerializedUserList, 4, '|');
+       ul->nPosts = StrBufExtract_int(SerializedUserList, 5, '|');
+       StrBufExtract_token(ul->Passvoid, SerializedUserList, 6, '|');
+       ul->Flags = 0;
+       ul->DaysTillPurge = -1;
+       return ul;
+}
 
-/* 
- * Locate the message number of a user's vCard in the current room
+/*
+ * Sort by Username
+ */
+int CompareUserListName(const void *vUser1, const void *vUser2)
+{
+       UserListEntry *u1 = (UserListEntry*) vUser1;
+       UserListEntry *u2 = (UserListEntry*) vUser2;
+
+       return strcmp(ChrPtr(u1->UserName), ChrPtr(u2->UserName));
+}
+int CompareUserListNameRev(const void *vUser1, const void *vUser2)
+{
+       UserListEntry *u1 = (UserListEntry*) vUser1;
+       UserListEntry *u2 = (UserListEntry*) vUser2;
+       return strcmp(ChrPtr(u2->UserName), ChrPtr(u1->UserName));
+}
+
+/*
+ * Sort by AccessLevel
+ */
+int CompareAccessLevel(const void *vUser1, const void *vUser2)
+{
+       UserListEntry *u1 = (UserListEntry*) vUser1;
+       UserListEntry *u2 = (UserListEntry*) vUser2;
+
+       return (u1->AccessLevel > u2->AccessLevel);
+}
+int CompareAccessLevelRev(const void *vUser1, const void *vUser2)
+{
+       UserListEntry *u1 = (UserListEntry*) vUser1;
+       UserListEntry *u2 = (UserListEntry*) vUser2;
+
+       return (u2->AccessLevel > u1->AccessLevel);
+}
+
+
+/*
+ * Sort by UID
+ */
+int CompareUID(const void *vUser1, const void *vUser2)
+{
+       UserListEntry *u1 = (UserListEntry*) vUser1;
+       UserListEntry *u2 = (UserListEntry*) vUser2;
+
+       return (u1->UID > u2->UID);
+}
+int CompareUIDRev(const void *vUser1, const void *vUser2)
+{
+       UserListEntry *u1 = (UserListEntry*) vUser1;
+       UserListEntry *u2 = (UserListEntry*) vUser2;
+
+       return (u2->UID > u1->UID);
+}
+
+/*
+ * Sort By Date /// TODO!
+ */
+int CompareLastLogon(const void *vUser1, const void *vUser2)
+{
+       UserListEntry *u1 = (UserListEntry*) vUser1;
+       UserListEntry *u2 = (UserListEntry*) vUser2;
+
+       return (u1->LastLogonT > u2->LastLogonT);
+}
+int CompareLastLogonRev(const void *vUser1, const void *vUser2)
+{
+       UserListEntry *u1 = (UserListEntry*) vUser1;
+       UserListEntry *u2 = (UserListEntry*) vUser2;
+
+       return (u2->LastLogonT > u1->LastLogonT);
+}
+
+/*
+ * Sort By Number of Logons
+ */
+int ComparenLogons(const void *vUser1, const void *vUser2)
+{
+       UserListEntry *u1 = (UserListEntry*) vUser1;
+       UserListEntry *u2 = (UserListEntry*) vUser2;
+
+       return (u1->nLogons > u2->nLogons);
+}
+int ComparenLogonsRev(const void *vUser1, const void *vUser2)
+{
+       UserListEntry *u1 = (UserListEntry*) vUser1;
+       UserListEntry *u2 = (UserListEntry*) vUser2;
+
+       return (u2->nLogons > u1->nLogons);
+}
+
+/*
+ * Sort By Number of Posts
+ */
+int ComparenPosts(const void *vUser1, const void *vUser2)
+{
+       UserListEntry *u1 = (UserListEntry*) vUser1;
+       UserListEntry *u2 = (UserListEntry*) vUser2;
+
+       return (u1->nPosts > u2->nPosts);
+}
+int ComparenPostsRev(const void *vUser1, const void *vUser2)
+{
+       UserListEntry *u1 = (UserListEntry*) vUser1;
+       UserListEntry *u2 = (UserListEntry*) vUser2;
+
+       return (u2->nPosts > u1->nPosts);
+}
+
+
+HashList *iterate_load_userlist(WCTemplateToken *Token)
+{
+       HashList *Hash;
+       char buf[SIZ];
+       StrBuf *Buf;
+       UserListEntry* ul;
+       char nnn[64];
+       int nUsed;
+       int Order;
+       int len;
+       
+        serv_puts("LIST");
+        serv_getln(buf, sizeof buf);
+        if (buf[0] == '1') {
+               Hash = NewHash(1, NULL);
+
+               Buf = NewStrBuf();
+               while ((len = StrBuf_ServGetln(Buf),
+                       strcmp(ChrPtr(Buf), "000"))) {
+                       ul = NewUserListEntry(Buf);
+                       if (ul == NULL)
+                               continue;
+                       nUsed = GetCount(Hash);
+                       nUsed = snprintf(nnn, sizeof(nnn), "%d", nUsed+1);
+                       Put(Hash, nnn, nUsed, ul, DeleteUserListEntry); 
+               }
+               FreeStrBuf(&Buf);
+               Order = ibstr("SortOrder");
+               switch (ibstr("SortBy")){
+               case 1: /*NAME*/
+                       SortByPayload(Hash, (Order)? 
+                                     CompareUserListName:
+                                     CompareUserListNameRev);
+                       break;
+               case 2: /*AccessLevel*/
+                       SortByPayload(Hash, (Order)? 
+                                     CompareAccessLevel:
+                                     CompareAccessLevelRev);
+                       break;
+               case 3: /*nLogons*/
+                       SortByPayload(Hash, (Order)? 
+                                     ComparenLogons:
+                                     ComparenLogonsRev);
+                       break;
+               case 4: /*UID*/
+                       SortByPayload(Hash, (Order)? 
+                                     CompareUID:
+                                     CompareUIDRev);
+                       break;
+               case 5: /*LastLogon*/
+                       SortByPayload(Hash, (Order)? 
+                                     CompareLastLogon:
+                                     CompareLastLogonRev);
+                       break;
+               case 6: /* nLogons */
+                       SortByPayload(Hash, (Order)? 
+                                     ComparenLogons:
+                                     ComparenLogonsRev);
+                       break;
+               case 7: /* Posts */
+                       SortByPayload(Hash, (Order)? 
+                                     ComparenPosts:
+                                     ComparenPostsRev);
+                       break;
+               }
+               return Hash;
+        }
+       return NULL;
+}
+
+
+void tmplput_USERLIST_UserName(StrBuf *Target, int nArgs, WCTemplateToken *Token, void *Context, int ContextType)
+{
+       UserListEntry *ul = (UserListEntry*) Context;
+/// TODO: X
+       StrBufAppendBuf(Target, ul->UserName, 0);
+}
+
+void tmplput_USERLIST_AccessLevelNo(StrBuf *Target, int nArgs, WCTemplateToken *Token, void *Context, int ContextType)
+{
+       UserListEntry *ul = (UserListEntry*) Context;
+
+       StrBufAppendPrintf(Target, "%d", ul->AccessLevel, 0);
+}
+
+void tmplput_USERLIST_AccessLevelStr(StrBuf *Target, int nArgs, WCTemplateToken *Token, void *Context, int ContextType)
+{
+       UserListEntry *ul = (UserListEntry*) Context;
+       
+       StrBufAppendBufPlain(Target, _(axdefs[ul->AccessLevel]), -1, 0);
+}
+
+void tmplput_USERLIST_UID(StrBuf *Target, int nArgs, WCTemplateToken *Token, void *Context, int ContextType)
+{
+       UserListEntry *ul = (UserListEntry*) Context;
+
+       StrBufAppendPrintf(Target, "%d", ul->UID, 0);
+}
+
+void tmplput_USERLIST_LastLogonNo(StrBuf *Target, int nArgs, WCTemplateToken *Token, void *Context, int ContextType)
+{
+       UserListEntry *ul = (UserListEntry*) Context;
+
+       StrBufAppendPrintf(Target,"%ld", ul->LastLogonT, 0);
+}
+void tmplput_USERLIST_LastLogonStr(StrBuf *Target, int nArgs, WCTemplateToken *Token, void *Context, int ContextType)
+{
+       UserListEntry *ul = (UserListEntry*) Context;
+       StrEscAppend(Target, NULL, asctime(localtime(&ul->LastLogonT)), 0, 0);
+}
+
+void tmplput_USERLIST_nLogons(StrBuf *Target, int nArgs, WCTemplateToken *Token, void *Context, int ContextType)
+{
+       UserListEntry *ul = (UserListEntry*) Context;
+
+       StrBufAppendPrintf(Target, "%d", ul->nLogons, 0);
+}
+
+void tmplput_USERLIST_nPosts(StrBuf *Target, int nArgs, WCTemplateToken *Token, void *Context, int ContextType)
+{
+       UserListEntry *ul = (UserListEntry*) Context;
+
+       StrBufAppendPrintf(Target, "%d", ul->nPosts, 0);
+}
+
+void tmplput_USERLIST_Flags(StrBuf *Target, int nArgs, WCTemplateToken *Token, void *Context, int ContextType)
+{
+       UserListEntry *ul = (UserListEntry*) Context;
+
+       StrBufAppendPrintf(Target, "%d", ul->Flags, 0);
+}
+
+void tmplput_USERLIST_DaysTillPurge(StrBuf *Target, int nArgs, WCTemplateToken *Token, void *Context, int ContextType)
+{
+       UserListEntry *ul = (UserListEntry*) Context;
+
+       StrBufAppendPrintf(Target, "%d", ul->DaysTillPurge, 0);
+}
+
+int ConditionalUser(WCTemplateToken *Tokens, void *Context, int ContextType)
+{
+       UserListEntry *ul = (UserListEntry*) Context;
+       if (havebstr("usernum")) {
+               return ibstr("usernum") == ul->UID;
+       }
+       else if (havebstr("username")) {
+               return strcmp(bstr("username"), ChrPtr(ul->UserName)) == 0;
+       }
+       else 
+               return 0;
+}
+
+int ConditionalFlagINetEmail(WCTemplateToken *Tokens, void *Context, int ContextType)
+{
+       UserListEntry *ul = (UserListEntry*) Context;
+       return (ul->Flags & US_INTERNET) != 0;
+}
+
+int ConditionalUserAccess(WCTemplateToken *Tokens, void *Context, int ContextType)
+{
+       UserListEntry *ul = (UserListEntry*) Context;
+
+       if (Tokens->Params[3]->Type == TYPE_LONG)
+               return (Tokens->Params[3]->lvalue == ul->AccessLevel);
+       else
+               return 0;
+}
+
+/**
+ *  Locate the message number of a user's vCard in the current room
+ *  username the plaintext name of the user
+ *  usernum the number of the user on the citadel server
+ * \return the message id of his vcard
  */
 long locate_user_vcard(char *username, long usernum) {
        char buf[SIZ];
@@ -106,27 +463,27 @@ long locate_user_vcard(char *username, long usernum) {
        struct stuff_t *ptr;
 
 TRYAGAIN:
-       /* Search for the user's vCard */
+       /** Search for the user's vCard */
        serv_puts("MSGS ALL");
-       serv_gets(buf);
-       if (buf[0] == '1') while (serv_gets(buf), strcmp(buf, "000")) {
+       serv_getln(buf, sizeof buf);
+       if (buf[0] == '1') while (serv_getln(buf, sizeof buf), strcmp(buf, "000")) {
                ptr = malloc(sizeof(struct stuff_t));
                ptr->msgnum = atol(buf);
                ptr->next = stuff;
                stuff = ptr;
        }
 
-       /* Iterate through the message list looking for vCards */
+       /** Iterate through the message list looking for vCards */
        while (stuff != NULL) {
                serv_printf("MSG0 %ld|2", stuff->msgnum);
-               serv_gets(buf);
+               serv_getln(buf, sizeof buf);
                if (buf[0]=='1') {
-                       while(serv_gets(buf), strcmp(buf, "000")) {
+                       while(serv_getln(buf, sizeof buf), strcmp(buf, "000")) {
                                if (!strncasecmp(buf, "part=", 5)) {
-                                       extract(partnum, &buf[5], 2);
-                                       extract(content_type, &buf[5], 4);
-                                       if (!strcasecmp(content_type,
-                                          "text/x-vcard")) {
+                                       extract_token(partnum, &buf[5], 2, '|', sizeof partnum);
+                                       extract_token(content_type, &buf[5], 4, '|', sizeof content_type);
+                                       if (  (!strcasecmp(content_type, "text/x-vcard"))
+                                          || (!strcasecmp(content_type, "text/vcard")) ) {
                                                vcard_msgnum = stuff->msgnum;
                                        }
                                }
@@ -138,11 +495,11 @@ TRYAGAIN:
                stuff = ptr;
        }
 
-       /* If there's no vcard, create one */
+       /** If there's no vcard, create one */
        if (vcard_msgnum < 0) if (already_tried_creating_one == 0) {
                already_tried_creating_one = 1;
                serv_puts("ENT0 1|||4");
-               serv_gets(buf);
+               serv_getln(buf, sizeof buf);
                if (buf[0] == '4') {
                        serv_puts("Content-type: text/x-vcard");
                        serv_puts("");
@@ -157,8 +514,10 @@ TRYAGAIN:
 }
 
 
-/* 
- * Display the form for editing a user's address book entry
+/**
+ *  Display the form for editing a user's address book entry
+ *  username the name of the user
+ *  usernum the citadel-uid of the user
  */
 void display_edit_address_book_entry(char *username, long usernum) {
        char roomname[SIZ];
@@ -166,19 +525,19 @@ void display_edit_address_book_entry(char *username, long usernum) {
        char error_message[SIZ];
        long vcard_msgnum = (-1L);
 
-       /* Locate the user's config room, creating it if necessary */
+       /** Locate the user's config room, creating it if necessary */
        sprintf(roomname, "%010ld.%s", usernum, USERCONFIGROOM);
        serv_printf("GOTO %s||1", roomname);
-       serv_gets(buf);
+       serv_getln(buf, sizeof buf);
        if (buf[0] != '2') {
                serv_printf("CRE8 1|%s|5|||1|", roomname);
-               serv_gets(buf);
+               serv_getln(buf, sizeof buf);
                serv_printf("GOTO %s||1", roomname);
-               serv_gets(buf);
+               serv_getln(buf, sizeof buf);
                if (buf[0] != '2') {
                        sprintf(error_message,
-                               "<IMG SRC=\"static/error.gif\" ALIGN=CENTER>"
-                               "%s<BR><BR>\n", &buf[4]);
+                               "<img src=\"static/error.gif\" align=center>"
+                               "%s<br /><br />\n", &buf[4]);
                        select_user_to_edit(error_message, username);
                        return;
                }
@@ -188,31 +547,74 @@ void display_edit_address_book_entry(char *username, long usernum) {
 
        if (vcard_msgnum < 0) {
                sprintf(error_message,
-                       "<IMG SRC=\"static/error.gif\" ALIGN=CENTER>"
-                       "Could not create/edit vCard"
-                       "<BR><BR>\n"
+                       "<img src=\"static/error.gif\" align=center>%s<br /><br />\n",
+                       _("An error occurred while trying to create or edit this address book entry.")
                );
                select_user_to_edit(error_message, username);
                return;
        }
 
-       do_edit_vcard(vcard_msgnum, "1", "/select_user_to_edit");
+       do_edit_vcard(vcard_msgnum, "1", "select_user_to_edit", roomname);
 }
 
 
+void display_edituser(char *supplied_username, int is_new) {
+       UserListEntry* UL;
+       StrBuf *Buf;
+       char error_message[1024];
+       char MajorStatus;
+       char username[256];
+
+       if (supplied_username != NULL) {
+               safestrncpy(username, supplied_username, sizeof username);
+       }
+       else {
+               safestrncpy(username, bstr("username"), sizeof username);
+       }
+
+       Buf = NewStrBuf();
+       serv_printf("AGUP %s", username);
+       StrBuf_ServGetln(Buf);
+       MajorStatus = ChrPtr(Buf)[0];
+       StrBufCutLeft(Buf, 4);
+       if (MajorStatus != '2') {
+               ///TODO ImportantMessage
+               sprintf(error_message,
+                       "<img src=\"static/error.gif\" align=center>"
+                       "%s<br /><br />\n", ChrPtr(Buf));
+               select_user_to_edit(error_message, username);
+               FreeStrBuf(&Buf);
+               return;
+       }
+       else {
+               UL = NewUserListOneEntry(Buf);
+               output_headers(1, 0, 0, 0, 1, 0);
+               DoTemplate(HKEY("userlist_detailview"), NULL, (void*) UL, CTX_USERLIST);
+               end_burst();
+               
+       }
+       FreeStrBuf(&Buf);
+}
 
 
-/*
- * Edit a user.  If supplied_username is null, look in the "username"
+
+/* *
+ *  Edit a user.  
+ * If supplied_username is null, look in the "username"
  * web variable for the name of the user to edit.
- */
-void display_edituser(char *supplied_username) {
-       char buf[SIZ];
-       char error_message[SIZ];
+ * 
+ * If "is_new" is set to nonzero, this screen will set the web variables
+ * to send the user to the vCard editor next.
+ *  supplied_username user to look up or NULL if to search in the environment
+ *  is_new should we create the user?
+ * /
+void display_edituser(char *supplied_username, int is_new) {
+       char buf[1024];
+       char error_message[1024];
        time_t now;
 
-       char username[SIZ];
-       char password[SIZ];
+       char username[256];
+       char password[256];
        unsigned int flags;
        int timescalled;
        int msgsposted;
@@ -223,24 +625,24 @@ void display_edituser(char *supplied_username) {
        int i;
 
        if (supplied_username != NULL) {
-               strcpy(username, supplied_username);
+               safestrncpy(username, supplied_username, sizeof username);
        }
        else {
-               strcpy(username, bstr("username") );
+               safestrncpy(username, bstr("username"), sizeof username);
        }
 
        serv_printf("AGUP %s", username);
-       serv_gets(buf);
+       serv_getln(buf, sizeof buf);
        if (buf[0] != '2') {
                sprintf(error_message,
-                       "<IMG SRC=\"static/error.gif\" ALIGN=CENTER>"
-                       "%s<BR><BR>\n", &buf[4]);
+                       "<img src=\"static/error.gif\" align=center>"
+                       "%s<br /><br />\n", &buf[4]);
                select_user_to_edit(error_message, username);
                return;
        }
 
-       extract(username, &buf[4], 0);
-       extract(password, &buf[4], 1);
+       extract_token(username, &buf[4], 0, '|', sizeof username);
+       extract_token(password, &buf[4], 1, '|', sizeof password);
        flags = extract_int(&buf[4], 2);
        timescalled = extract_int(&buf[4], 3);
        msgsposted = extract_int(&buf[4], 4);
@@ -249,106 +651,180 @@ void display_edituser(char *supplied_username) {
        lastcall = extract_long(&buf[4], 7);
        purgedays = extract_long(&buf[4], 8);
 
-       if (!strcmp(bstr("sc"), "Edit address book entry")) {
+       if (havebstr("edit_abe_button")) {
                display_edit_address_book_entry(username, usernum);
                return;
        }
 
-       output_headers(3);      /* No room banner on this screen */
-       wprintf("<TABLE WIDTH=100%% BORDER=0 BGCOLOR=\"#007700\"><TR><TD>");
-       wprintf("<SPAN CLASS=\"titlebar\">"
-               "Edit user account: ");
+       if (havebstr("delete_button")) {
+               delete_user(username);
+               return;
+       }
+
+       output_headers(1, 1, 2, 0, 0, 0);
+       wprintf("<div id=\"banner\">\n");
+       wprintf("<h1>");
+       wprintf(_("Edit user account: "));
        escputs(username);
-       wprintf("</SPAN></TD></TR></TABLE>\n");
+        wprintf("</h1>");
+        wprintf("</div>");
+
+        wprintf("<div id=\"content\" class=\"service\">\n");
 
-       wprintf("<FORM METHOD=\"POST\" ACTION=\"/edituser\">\n"
-               "<INPUT TYPE=\"hidden\" NAME=\"username\" VALUE=\"");
+       wprintf("<div class=\"fix_scrollbar_bug\">"
+               "<table class=\"useredit_background\"><tr><td>\n");
+       wprintf("<form method=\"POST\" action=\"edituser\">\n"
+               "<input type=\"hidden\" name=\"username\" value=\"");
        escputs(username);
        wprintf("\">\n");
+       wprintf("<input type=\"hidden\" name=\"is_new\" value=\"%d\">\n"
+               "<input type=\"hidden\" name=\"usernum\" value=\"%ld\">\n",
+               is_new, usernum);
+       wprintf("<input type=\"hidden\" name=\"nonce\" value=\"%d\">\n", WC->nonce);
+
+       wprintf("<input type=\"hidden\" name=\"flags\" value=\"%d\">\n", flags);
 
-       wprintf("<INPUT TYPE=\"hidden\" NAME=\"flags\" VALUE=\"%d\">\n", flags);
+       wprintf("<center><table>");
 
-       wprintf("<CENTER><TABLE>");
+       wprintf("<tr><td>");
+       wprintf(_("User name:"));
+       wprintf("</td><td>"
+               "<input type=\"text\" name=\"newname\" value=\"");
+       escputs(username);
+       wprintf("\" maxlength=\"63\"></td></tr>\n");
 
-       wprintf("<TR><TD>Password</TD><TD>"
-               "<INPUT TYPE=\"password\" NAME=\"password\" VALUE=\"");
+       wprintf("<tr><td>");
+       wprintf(_("Password"));
+       wprintf("</td><td>"
+               "<input type=\"password\" name=\"password\" value=\"");
        escputs(password);
-       wprintf("\" MAXLENGTH=\"20\"></TD></TR>\n");
+       wprintf("\" maxlength=\"20\"></td></tr>\n");
+
+       wprintf("<tr><td>");
+       wprintf(_("Permission to send Internet mail"));
+       wprintf("</td><td>");
+       wprintf("<input type=\"checkbox\" name=\"inetmail\" value=\"yes\" ");
+       if (flags & US_INTERNET) {
+               wprintf("checked ");
+       }
+       wprintf("></td></tr>\n");
 
-       wprintf("<TR><TD>Times logged in</TD><TD>"
-               "<INPUT TYPE=\"text\" NAME=\"timescalled\" VALUE=\"");
+       wprintf("<tr><td>");
+       wprintf(_("Number of logins"));
+       wprintf("</td><td>"
+               "<input type=\"text\" name=\"timescalled\" value=\"");
        wprintf("%d", timescalled);
-       wprintf("\" MAXLENGTH=\"6\"></TD></TR>\n");
+       wprintf("\" maxlength=\"6\"></td></tr>\n");
 
-       wprintf("<TR><TD>Messages posted</TD><TD>"
-               "<INPUT TYPE=\"text\" NAME=\"msgsposted\" VALUE=\"");
+       wprintf("<tr><td>");
+       wprintf(_("Messages submitted"));
+       wprintf("</td><td>"
+               "<input type=\"text\" name=\"msgsposted\" value=\"");
        wprintf("%d", msgsposted);
-       wprintf("\" MAXLENGTH=\"6\"></TD></TR>\n");
+       wprintf("\" maxlength=\"6\"></td></tr>\n");
 
-       wprintf("<TR><TD>Access level</TD><TD>"
-               "<SELECT NAME=\"axlevel\">\n");
+       wprintf("<tr><td>");
+       wprintf(_("Access level"));
+       wprintf("</td><td>"
+               "<select name=\"axlevel\">\n");
        for (i=0; i<7; ++i) {
-               wprintf("<OPTION ");
+               wprintf("<option ");
                if (axlevel == i) {
-                       wprintf("SELECTED ");
+                       wprintf("selected ");
                }
-               wprintf("VALUE=\"%d\">%d - %s</OPTION>\n",
+               wprintf("value=\"%d\">%d - %s</option>\n",
                        i, i, axdefs[i]);
        }
-       wprintf("</SELECT></TD></TR>\n");
+       wprintf("</select></td></tr>\n");
 
-       wprintf("<TR><TD>User ID number</TD><TD>"
-               "<INPUT TYPE=\"text\" NAME=\"usernum\" VALUE=\"");
+       wprintf("<tr><td>");
+       wprintf(_("User ID number"));
+       wprintf("</td><td>"
+               "<input type=\"text\" name=\"usernum\" value=\"");
        wprintf("%ld", usernum);
-       wprintf("\" MAXLENGTH=\"7\"></TD></TR>\n");
+       wprintf("\" maxlength=\"7\"></td></tr>\n");
 
        now = time(NULL);
-       wprintf("<TR><TD>Date/time of last login</TD><TD>"
-               "<SELECT NAME=\"lastcall\">\n");
+       wprintf("<tr><td>");
+       wprintf(_("Date and time of last login"));
+       wprintf("</td><td>"
+               "<select name=\"lastcall\">\n");
 
-       wprintf("<OPTION SELECTED VALUE=\"%ld\">", lastcall);
+       wprintf("<option selected value=\"%ld\">", lastcall);
        escputs(asctime(localtime(&lastcall)));
-       wprintf("</OPTION>\n");
+       wprintf("</option>\n");
 
-       wprintf("<OPTION VALUE=\"%ld\">", now);
+       wprintf("<option value=\"%ld\">", now);
        escputs(asctime(localtime(&now)));
-       wprintf("</OPTION>\n");
+       wprintf("</option>\n");
 
-       wprintf("</SELECT></TD></TR>");
+       wprintf("</select></td></tr>");
 
-       wprintf("<TR><TD>Auto-purge after days</TD><TD>"
-               "<INPUT TYPE=\"text\" NAME=\"purgedays\" VALUE=\"");
+       wprintf("<tr><td>");
+       wprintf(_("Auto-purge after this many days"));
+       wprintf("</td><td>"
+               "<input type=\"text\" name=\"purgedays\" value=\"");
        wprintf("%d", purgedays);
-       wprintf("\" MAXLENGTH=\"5\"></TD></TR>\n");
-
-       wprintf("</TABLE>\n");
+       wprintf("\" maxlength=\"5\"></td></tr>\n");
 
-       wprintf("<INPUT type=\"submit\" NAME=\"action\" VALUE=\"OK\">\n"
-               "<INPUT type=\"submit\" NAME=\"action\" VALUE=\"Cancel\">\n"
-               "<BR><BR></FORM>\n");
+       wprintf("</table>\n");
 
-       wprintf("</CENTER>\n");
+       wprintf("<input type=\"submit\" name=\"ok_button\" value=\"%s\">\n"
+               "&nbsp;"
+               "<input type=\"submit\" name=\"cancel\" value=\"%s\">\n"
+               "<br /><br /></form>\n", _("Save changes"), _("Cancel"));
 
+       wprintf("</center>\n");
+       wprintf("</td></tr></table></div>\n");
        wDumpContent(1);
 
 }
+*/
 
-
-
+/**
+ *  do the backend operation of the user edit on the server
+ */
 void edituser(void) {
        char message[SIZ];
        char buf[SIZ];
+       int is_new = 0;
+       unsigned int flags = 0;
+       char *username;
 
-       if (strcasecmp(bstr("action"), "OK")) {
-               strcpy(message, "Edit user cancelled.");
-       }
+       is_new = ibstr("is_new");
+       safestrncpy(message, "", sizeof message);
+       username = bstr("username");
 
+       if (!havebstr("ok_button")) {
+               safestrncpy(message, _("Changes were not saved."), sizeof message);
+       }
+       
        else {
+               flags = ibstr("flags");
+               if (yesbstr("inetmail")) {
+                       flags |= US_INTERNET;
+               }
+               else {
+                       flags &= ~US_INTERNET ;
+               }
+
+               if ((havebstr("newname")) && (strcasecmp(bstr("username"), bstr("newname")))) {
+                       serv_printf("RENU %s|%s", bstr("username"), bstr("newname"));
+                       serv_getln(buf, sizeof buf);
+                       if (buf[0] != '2') {
+                               sprintf(&message[strlen(message)],
+                                       "<img src=\"static/error.gif\" align=center>"
+                                       "%s<br /><br />\n", &buf[4]);
+                       }
+                       else {
+                               username = bstr("newname");
+                       }
+               }
 
-               serv_printf("ASUP %s|%s|%s|%s|%s|%s|%s|%s|%s|",
-                       bstr("username"),
+               serv_printf("ASUP %s|%s|%d|%s|%s|%s|%s|%s|%s|",
+                       username,
                        bstr("password"),
-                       bstr("flags"),
+                       flags,
                        bstr("timescalled"),
                        bstr("msgsposted"),
                        bstr("axlevel"),
@@ -356,43 +832,114 @@ void edituser(void) {
                        bstr("lastcall"),
                        bstr("purgedays")
                );
-               serv_gets(buf);
+               serv_getln(buf, sizeof buf);
                if (buf[0] != '2') {
-                       sprintf(message,
-                               "<IMG SRC=\"static/error.gif\" ALIGN=CENTER>"
-                               "%s<BR><BR>\n", &buf[4]);
-               }
-               else {
-                       strcpy(message, "");
+                       sprintf(&message[strlen(message)],
+                               "<img src=\"static/error.gif\" align=center>"
+                               "%s<br /><br />\n", &buf[4]);
                }
        }
 
-       select_user_to_edit(message, bstr("username"));
+       /**
+        * If we are in the middle of creating a new user, move on to
+        * the vCard edit screen.
+        */
+       if (is_new) {
+               display_edit_address_book_entry(username, lbstr("usernum") );
+       }
+       else {
+               select_user_to_edit(message, username);
+       }
 }
 
+/*
+ *  burge a user 
+ *  username the name of the user to remove
+ */
+void delete_user(char *username) {
+       char buf[SIZ];
+       char message[SIZ];
 
+       serv_printf("ASUP %s|0|0|0|0|0|", username);
+       serv_getln(buf, sizeof buf);
+       if (buf[0] != '2') {
+               sprintf(message,
+                       "<img src=\"static/error.gif\" align=center>"
+                       "%s<br /><br />\n", &buf[4]);
+       }
+       else {
+               safestrncpy(message, "", sizeof message);
+       }
+       select_user_to_edit(message, bstr("username"));
+}
+               
 
 
+/**
+ *  create a new user
+ * take the web environment username and create it on the citadel server
+ */
 void create_user(void) {
        char buf[SIZ];
        char error_message[SIZ];
        char username[SIZ];
 
-       strcpy(username, bstr("username"));
+       safestrncpy(username, bstr("username"), sizeof username);
 
        serv_printf("CREU %s", username);
-       serv_gets(buf);
+       serv_getln(buf, sizeof buf);
 
        if (buf[0] == '2') {
-               sprintf(error_message, "<b>User has been created.</b>");
-               select_user_to_edit(error_message, username);
+               sprintf(WC->ImportantMessage, _("A new user has been created."));
+               display_edituser(username, 1);
+       }
+       else if (!strncmp(buf, "570", 3)) {
+               sprintf(error_message,
+                       "<img src=\"static/error.gif\" align=center>"
+                       "%s<br /><br />\n",
+                       _("You are attempting to create a new user from within Citadel "
+                       "while running in host based authentication mode.  In this mode, "
+                       "you must create new users on the host system, not within Citadel.")
+               );
+               select_user_to_edit(error_message, NULL);
        }
        else {
                sprintf(error_message,
-                       "<IMG SRC=\"static/error.gif\" ALIGN=CENTER>"
-                       "%s<BR><BR>\n", &buf[4]);
+                       "<img src=\"static/error.gif\" align=center>"
+                       "%s<br /><br />\n", &buf[4]);
                select_user_to_edit(error_message, NULL);
        }
 
 }
 
+
+void _select_user_to_edit(void){select_user_to_edit(NULL, NULL);}
+void _display_edituser(void) {display_edituser(NULL, 0);}
+
+void 
+InitModule_USEREDIT
+(void)
+{
+       WebcitAddUrlHandler(HKEY("select_user_to_edit"), _select_user_to_edit, 0);
+       WebcitAddUrlHandler(HKEY("display_edituser"), _display_edituser, 0);
+       WebcitAddUrlHandler(HKEY("edituser"), edituser, 0);
+       WebcitAddUrlHandler(HKEY("create_user"), create_user, 0);
+
+       RegisterNamespace("USERLIST:USERNAME",      0, 1, tmplput_USERLIST_UserName, CTX_USERLIST);
+       RegisterNamespace("USERLIST:ACCLVLNO",      0, 0, tmplput_USERLIST_AccessLevelNo, CTX_USERLIST);
+       RegisterNamespace("USERLIST:ACCLVLSTR",     0, 0, tmplput_USERLIST_AccessLevelStr, CTX_USERLIST);
+       RegisterNamespace("USERLIST:UID",           0, 0, tmplput_USERLIST_UID, CTX_USERLIST);
+       RegisterNamespace("USERLIST:LASTLOGON:STR", 0, 0, tmplput_USERLIST_LastLogonStr, CTX_USERLIST);
+       RegisterNamespace("USERLIST:LASTLOGON:NO",  0, 0, tmplput_USERLIST_LastLogonNo, CTX_USERLIST);
+       RegisterNamespace("USERLIST:NLOGONS",       0, 0, tmplput_USERLIST_nLogons, CTX_USERLIST);
+       RegisterNamespace("USERLIST:NPOSTS",        0, 0, tmplput_USERLIST_nPosts, CTX_USERLIST);
+                                                   
+       RegisterNamespace("USERLIST:FLAGS",         0, 0, tmplput_USERLIST_Flags, CTX_USERLIST);
+       RegisterNamespace("USERLIST:DAYSTILLPURGE", 0, 0, tmplput_USERLIST_DaysTillPurge, CTX_USERLIST);
+
+       RegisterConditional(HKEY("COND:USERNAME"),  0,    ConditionalUser, CTX_USERLIST);
+       RegisterConditional(HKEY("COND:USERACCESS"), 0,   ConditionalUserAccess, CTX_USERLIST);
+       RegisterConditional(HKEY("COND:USERLIST:FLAG:USE_INTERNET"), 0, ConditionalFlagINetEmail, CTX_USERLIST);
+
+       RegisterIterator("USERLIST", 0, NULL, iterate_load_userlist, NULL, DeleteHash, CTX_USERLIST);
+}