+++ /dev/null
-/*
- * Server functions which handle file transfers and room directories.
- *
- * Copyright (c) 1987-2018 by the citadel.org team
- *
- * This program is open source software; you can redistribute it and/or modify
- * it under the terms of the GNU General Public License version 3.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- */
-
-#include <stdlib.h>
-#include <unistd.h>
-#include <stdio.h>
-#include <netdb.h>
-#include <libcitadel.h>
-#include <dirent.h>
-#include <sys/types.h>
-#include <sys/stat.h>
-#include "ctdl_module.h"
-#include "citserver.h"
-#include "support.h"
-#include "config.h"
-#include "user_ops.h"
-
-
-/*
- * Server command to delete a file from a room's directory
- */
-void cmd_delf(char *filename)
-{
- char pathname[64];
- int a;
-
- if (CtdlAccessCheck(ac_room_aide))
- return;
-
- if ((CC->room.QRflags & QR_DIRECTORY) == 0) {
- cprintf("%d No directory in this room.\n", ERROR + NOT_HERE);
- return;
- }
-
- if (IsEmptyStr(filename)) {
- cprintf("%d You must specify a file name.\n", ERROR + FILE_NOT_FOUND);
- return;
- }
- for (a = 0; !IsEmptyStr(&filename[a]); ++a) {
- if ( (filename[a] == '/') || (filename[a] == '\\') ) {
- filename[a] = '_';
- }
- }
- snprintf(pathname, sizeof pathname,
- "%s/%s/%s",
- ctdl_file_dir,
- CC->room.QRdirname, filename
- );
- a = unlink(pathname);
- if (a == 0) {
- cprintf("%d File '%s' deleted.\n", CIT_OK, pathname);
- }
- else {
- cprintf("%d File '%s' not found.\n", ERROR + FILE_NOT_FOUND, pathname);
- }
-}
-
-
-/*
- * move a file from one room directory to another
- */
-void cmd_movf(char *cmdbuf)
-{
- char filename[PATH_MAX];
- char pathname[PATH_MAX];
- char newpath[PATH_MAX];
- char newroom[ROOMNAMELEN];
- char buf[PATH_MAX];
- int a;
- struct ctdlroom qrbuf;
-
- extract_token(filename, cmdbuf, 0, '|', sizeof filename);
- extract_token(newroom, cmdbuf, 1, '|', sizeof newroom);
-
- if (CtdlAccessCheck(ac_room_aide)) return;
-
- if ((CC->room.QRflags & QR_DIRECTORY) == 0) {
- cprintf("%d No directory in this room.\n", ERROR + NOT_HERE);
- return;
- }
-
- if (IsEmptyStr(filename)) {
- cprintf("%d You must specify a file name.\n", ERROR + FILE_NOT_FOUND);
- return;
- }
-
- for (a = 0; !IsEmptyStr(&filename[a]); ++a) {
- if ( (filename[a] == '/') || (filename[a] == '\\') ) {
- filename[a] = '_';
- }
- }
- snprintf(pathname, sizeof pathname, "./files/%s/%s", CC->room.QRdirname, filename);
- if (access(pathname, 0) != 0) {
- cprintf("%d File '%s' not found.\n", ERROR + FILE_NOT_FOUND, pathname);
- return;
- }
-
- if (CtdlGetRoom(&qrbuf, newroom) != 0) {
- cprintf("%d '%s' does not exist.\n", ERROR + ROOM_NOT_FOUND, newroom);
- return;
- }
- if ((qrbuf.QRflags & QR_DIRECTORY) == 0) {
- cprintf("%d '%s' is not a directory room.\n", ERROR + NOT_HERE, qrbuf.QRname);
- return;
- }
- snprintf(newpath, sizeof newpath, "./files/%s/%s", qrbuf.QRdirname, filename);
- if (link(pathname, newpath) != 0) {
- cprintf("%d Couldn't move file: %s\n", ERROR + INTERNAL_ERROR, strerror(errno));
- return;
- }
- unlink(pathname);
-
- /* this is a crude method of copying the file description */
- snprintf(buf, sizeof buf, "cat ./files/%s/filedir |grep \"%s\" >>./files/%s/filedir", CC->room.QRdirname, filename, qrbuf.QRdirname);
- system(buf);
- cprintf("%d File '%s' has been moved.\n", CIT_OK, filename);
-}
-
-
-/*
- * This code is common to all commands which open a file for downloading,
- * regardless of whether it's a file from the directory, an image, a network
- * spool file, a MIME attachment, etc.
- * It examines the file and displays the OK result code and some information
- * about the file. NOTE: this stuff is Unix dependent.
- */
-void OpenCmdResult(char *filename, const char *mime_type)
-{
- struct stat statbuf;
- time_t modtime;
- long filesize;
-
- fstat(fileno(CC->download_fp), &statbuf);
- CC->download_fp_total = statbuf.st_size;
- filesize = (long) statbuf.st_size;
- modtime = (time_t) statbuf.st_mtime;
-
- cprintf("%d %ld|%ld|%s|%s\n", CIT_OK, filesize, (long)modtime, filename, mime_type);
-}
-
-
-/*
- * open a file for downloading
- */
-void cmd_open(char *cmdbuf)
-{
- char filename[256];
- char pathname[PATH_MAX];
- int a;
-
- extract_token(filename, cmdbuf, 0, '|', sizeof filename);
-
- if (CtdlAccessCheck(ac_logged_in)) return;
-
- if ((CC->room.QRflags & QR_DIRECTORY) == 0) {
- cprintf("%d No directory in this room.\n", ERROR + NOT_HERE);
- return;
- }
-
- if (IsEmptyStr(filename)) {
- cprintf("%d You must specify a file name.\n", ERROR + FILE_NOT_FOUND);
- return;
- }
- if (strstr(filename, "../") != NULL)
- {
- cprintf("%d syntax error.\n", ERROR + ILLEGAL_VALUE);
- return;
- }
-
- if (CC->download_fp != NULL) {
- cprintf("%d You already have a download file open.\n", ERROR + RESOURCE_BUSY);
- return;
- }
-
- for (a = 0; !IsEmptyStr(&filename[a]); ++a) {
- if ( (filename[a] == '/') || (filename[a] == '\\') ) {
- filename[a] = '_';
- }
- }
-
- snprintf(pathname, sizeof pathname, "%s/%s/%s", ctdl_file_dir, CC->room.QRdirname, filename);
- CC->download_fp = fopen(pathname, "r");
-
- if (CC->download_fp == NULL) {
- cprintf("%d cannot open %s: %s\n", ERROR + INTERNAL_ERROR, pathname, strerror(errno));
- return;
- }
-
- OpenCmdResult(filename, "application/octet-stream");
-}
-
-
-/*
- * open an image file
- */
-void cmd_oimg(char *cmdbuf)
-{
- char filename[PATH_MAX];
- char pathname[PATH_MAX];
- char MimeTestBuf[32];
- int rv;
-
- extract_token(filename, cmdbuf, 0, '|', sizeof filename);
-
- if (IsEmptyStr(filename)) {
- cprintf("%d You must specify a file name.\n", ERROR + FILE_NOT_FOUND);
- return;
- }
-
- if (CC->download_fp != NULL) {
- cprintf("%d You already have a download file open.\n", ERROR + RESOURCE_BUSY);
- return;
- }
-
- CC->download_fp = fopen(pathname, "rb");
- if (CC->download_fp == NULL) {
- strcat(pathname, ".gif");
- CC->download_fp = fopen(pathname, "rb");
- }
- if (CC->download_fp == NULL) {
- cprintf("%d Cannot open %s: %s\n", ERROR + FILE_NOT_FOUND, pathname, strerror(errno));
- return;
- }
- rv = fread(&MimeTestBuf[0], 1, 32, CC->download_fp);
- if (rv == -1) {
- cprintf("%d Cannot access %s: %s\n", ERROR + FILE_NOT_FOUND, pathname, strerror(errno));
- return;
- }
-
- rewind (CC->download_fp);
- OpenCmdResult(pathname, GuessMimeType(&MimeTestBuf[0], 32));
-}
-
-
-/*
- * open a file for uploading
- */
-void cmd_uopn(char *cmdbuf)
-{
- int a;
-
- extract_token(CC->upl_file, cmdbuf, 0, '|', sizeof CC->upl_file);
- extract_token(CC->upl_mimetype, cmdbuf, 1, '|', sizeof CC->upl_mimetype);
- extract_token(CC->upl_comment, cmdbuf, 2, '|', sizeof CC->upl_comment);
-
- if (CtdlAccessCheck(ac_logged_in)) return;
-
- if ((CC->room.QRflags & QR_DIRECTORY) == 0) {
- cprintf("%d No directory in this room.\n", ERROR + NOT_HERE);
- return;
- }
-
- if (IsEmptyStr(CC->upl_file)) {
- cprintf("%d You must specify a file name.\n", ERROR + FILE_NOT_FOUND);
- return;
- }
-
- if (CC->upload_fp != NULL) {
- cprintf("%d You already have a upload file open.\n", ERROR + RESOURCE_BUSY);
- return;
- }
-
- for (a = 0; !IsEmptyStr(&CC->upl_file[a]); ++a) {
- if ( (CC->upl_file[a] == '/') || (CC->upl_file[a] == '\\') ) {
- CC->upl_file[a] = '_';
- }
- }
- snprintf(CC->upl_path, sizeof CC->upl_path, "%s/%s/%s", ctdl_file_dir, CC->room.QRdirname, CC->upl_file);
- snprintf(CC->upl_filedir, sizeof CC->upl_filedir, "%s/%s/filedir", ctdl_file_dir, CC->room.QRdirname);
-
- CC->upload_fp = fopen(CC->upl_path, "r");
- if (CC->upload_fp != NULL) {
- fclose(CC->upload_fp);
- CC->upload_fp = NULL;
- cprintf("%d '%s' already exists\n", ERROR + ALREADY_EXISTS, CC->upl_path);
- return;
- }
-
- CC->upload_fp = fopen(CC->upl_path, "wb");
- if (CC->upload_fp == NULL) {
- cprintf("%d Cannot open %s: %s\n", ERROR + INTERNAL_ERROR, CC->upl_path, strerror(errno));
- return;
- }
- cprintf("%d Ok\n", CIT_OK);
-}
-
-
-/*
- * open an image file for uploading
- */
-void cmd_uimg(char *cmdbuf)
-{
- int is_this_for_real;
- char basenm[256];
- int a;
-
- if (num_parms(cmdbuf) < 2) {
- cprintf("%d Usage error.\n", ERROR + ILLEGAL_VALUE);
- return;
- }
-
- is_this_for_real = extract_int(cmdbuf, 0);
- extract_token(CC->upl_mimetype, cmdbuf, 1, '|', sizeof CC->upl_mimetype);
- extract_token(basenm, cmdbuf, 2, '|', sizeof basenm);
- if (CC->upload_fp != NULL) {
- cprintf("%d You already have an upload file open.\n", ERROR + RESOURCE_BUSY);
- return;
- }
-
- strcpy(CC->upl_path, "");
-
- for (a = 0; !IsEmptyStr(&basenm[a]); ++a) {
- basenm[a] = tolower(basenm[a]);
- if ( (basenm[a] == '/') || (basenm[a] == '\\') ) {
- basenm[a] = '_';
- }
- }
-
- if (CC->user.axlevel >= AxAideU) {
- snprintf(CC->upl_path, sizeof CC->upl_path, "%s/%s", ctdl_image_dir, basenm);
- }
-
- if (IsEmptyStr(CC->upl_path)) {
- cprintf("%d Higher access required.\n", ERROR + HIGHER_ACCESS_REQUIRED);
- return;
- }
-
- if (is_this_for_real == 0) {
- cprintf("%d Ok to send image\n", CIT_OK);
- return;
- }
-
- CC->upload_fp = fopen(CC->upl_path, "wb");
- if (CC->upload_fp == NULL) {
- cprintf("%d Cannot open %s: %s\n", ERROR + INTERNAL_ERROR, CC->upl_path, strerror(errno));
- return;
- }
- cprintf("%d Ok\n", CIT_OK);
-}
-
-
-/*
- * close the download file
- */
-void cmd_clos(char *cmdbuf)
-{
- if (CC->download_fp == NULL) {
- cprintf("%d You don't have a download file open.\n", ERROR + RESOURCE_NOT_OPEN);
- return;
- }
-
- fclose(CC->download_fp);
- CC->download_fp = NULL;
- cprintf("%d Ok\n", CIT_OK);
-}
-
-
-/*
- * abort an upload
- */
-void abort_upl(CitContext *who)
-{
- if (who->upload_fp != NULL) {
- fclose(who->upload_fp);
- who->upload_fp = NULL;
- unlink(CC->upl_path);
- }
-}
-
-
-/*
- * close the upload file
- */
-void cmd_ucls(char *cmd)
-{
- FILE *fp;
- char upload_notice[SIZ];
-
- if (CC->upload_fp == NULL) {
- cprintf("%d You don't have an upload file open.\n", ERROR + RESOURCE_NOT_OPEN);
- return;
- }
-
- fclose(CC->upload_fp);
- CC->upload_fp = NULL;
-
- if (!strcasecmp(cmd, "1")) {
- cprintf("%d File '%s' saved.\n", CIT_OK, CC->upl_path);
- fp = fopen(CC->upl_filedir, "a");
- if (fp == NULL) {
- fp = fopen(CC->upl_filedir, "w");
- }
- if (fp != NULL) {
- fprintf(fp, "%s %s %s\n", CC->upl_file, CC->upl_mimetype, CC->upl_comment);
- fclose(fp);
- }
-
- if ((CC->room.QRflags2 & QR2_NOUPLMSG) == 0) {
- /* put together an upload notice */
- snprintf(upload_notice, sizeof upload_notice,
- "NEW UPLOAD: '%s'\n %s\n%s\n",
- CC->upl_file,
- CC->upl_comment,
- CC->upl_mimetype
- );
- quickie_message(CC->curr_user, NULL, NULL, CC->room.QRname, upload_notice, 0, NULL);
- }
- } else {
- abort_upl(CC);
- cprintf("%d File '%s' aborted.\n", CIT_OK, CC->upl_path);
- }
-}
-
-
-/*
- * read from the download file
- */
-void cmd_read(char *cmdbuf)
-{
- long start_pos;
- size_t bytes;
- char buf[SIZ];
- int rc;
-
- /* The client will transmit its requested offset and byte count */
- start_pos = extract_long(cmdbuf, 0);
- bytes = extract_int(cmdbuf, 1);
- if ((start_pos < 0) || (bytes <= 0)) {
- cprintf("%d you have to specify a value > 0.\n", ERROR + ILLEGAL_VALUE);
- return;
- }
-
- if (CC->download_fp == NULL) {
- cprintf("%d You don't have a download file open.\n", ERROR + RESOURCE_NOT_OPEN);
- return;
- }
-
- /* If necessary, reduce the byte count to the size of our buffer */
- if (bytes > sizeof(buf)) {
- bytes = sizeof(buf);
- }
-
- rc = fseek(CC->download_fp, start_pos, 0);
- if (rc < 0) {
- cprintf("%d your file is smaller than %ld.\n", ERROR + ILLEGAL_VALUE, start_pos);
- syslog(LOG_ERR, "serv_file: your file %s is smaller than %ld [%s]",
- CC->upl_path,
- start_pos,
- strerror(errno)
- );
-
- return;
- }
- bytes = fread(buf, 1, bytes, CC->download_fp);
- if (bytes > 0) {
- /* Tell the client the actual byte count and transmit it */
- cprintf("%d %d\n", BINARY_FOLLOWS, (int)bytes);
- client_write(buf, bytes);
- }
- else {
- cprintf("%d %s\n", ERROR, strerror(errno));
- }
-}
-
-
-/*
- * write to the upload file
- */
-void cmd_writ(char *cmdbuf)
-{
- struct CitContext *CCC = CC;
- int bytes;
- char *buf;
- int rv;
-
- unbuffer_output();
-
- bytes = extract_int(cmdbuf, 0);
-
- if (CCC->upload_fp == NULL) {
- cprintf("%d You don't have an upload file open.\n", ERROR + RESOURCE_NOT_OPEN);
- return;
- }
- if (bytes <= 0) {
- cprintf("%d you have to specify a value > 0.\n", ERROR + ILLEGAL_VALUE);
- return;
- }
-
- if (bytes > 100000) {
- bytes = 100000;
- }
-
- cprintf("%d %d\n", SEND_BINARY, bytes);
- buf = malloc(bytes + 1);
- client_read(buf, bytes);
- rv = fwrite(buf, bytes, 1, CCC->upload_fp);
- if (rv == -1) {
- syslog(LOG_ERR, "serv_file: %s", strerror(errno));
- }
- free(buf);
-}
-
-
-void files_logout_hook(void)
-{
- CitContext *CCC = MyContext();
-
- /*
- * If there is a download in progress, abort it.
- */
- if (CCC->download_fp != NULL) {
- fclose(CCC->download_fp);
- CCC->download_fp = NULL;
- }
-
- /*
- * If there is an upload in progress, abort it.
- */
- if (CCC->upload_fp != NULL) {
- abort_upl(CCC);
- }
-
-}
-
-
-/*
- * help_subst() - support routine for help file viewer
- */
-void help_subst(char *strbuf, char *source, char *dest)
-{
- char workbuf[SIZ];
- int p;
-
- while (p = pattern2(strbuf, source), (p >= 0)) {
- strcpy(workbuf, &strbuf[p + strlen(source)]);
- strcpy(&strbuf[p], dest);
- strcat(strbuf, workbuf);
- }
-}
-
-
-void do_help_subst(char *buffer)
-{
- char buf2[16];
-
- help_subst(buffer, "^nodename", CtdlGetConfigStr("c_nodename"));
- help_subst(buffer, "^humannode", CtdlGetConfigStr("c_humannode"));
- help_subst(buffer, "^fqdn", CtdlGetConfigStr("c_fqdn"));
- help_subst(buffer, "^username", CC->user.fullname);
- snprintf(buf2, sizeof buf2, "%ld", CC->user.usernum);
- help_subst(buffer, "^usernum", buf2);
- help_subst(buffer, "^sysadm", CtdlGetConfigStr("c_sysadm"));
- help_subst(buffer, "^variantname", CITADEL);
- help_subst(buffer, "^maxsessions", CtdlGetConfigStr("c_maxsessions")); // yes it's numeric but str is ok here
- help_subst(buffer, "^bbsdir", ctdl_message_dir);
-}
-
-
-typedef const char *ccharp;
-/*
- * display system messages or help
- */
-void cmd_mesg(char *mname)
-{
- FILE *mfp;
- char targ[256];
- char buf[256];
- char buf2[256];
- DIR *dp;
- struct dirent *d;
-
- extract_token(buf, mname, 0, '|', sizeof buf);
-
- snprintf(buf2, sizeof buf2, "%s.%d.%d", buf, CC->cs_clientdev, CC->cs_clienttyp);
-
- /* If the client requested "?" then produce a listing */
- if (!strcmp(buf, "?")) {
- cprintf("%d %s\n", LISTING_FOLLOWS, buf);
- dp = opendir(ctdl_message_dir);
- if (dp != NULL) {
- while (d = readdir(dp), d != NULL) {
- if (d->d_name[0] != '.') {
- cprintf(" %s\n", d->d_name);
- }
- }
- closedir(dp);
- }
- cprintf("000\n");
- return;
- }
-
- /* Otherwise, look for the requested file by name. */
- snprintf(targ, sizeof targ, "%s/%s", ctdl_message_dir, buf);
- mfp = fopen(targ, "r");
- if (mfp==NULL) {
- cprintf("%d Cannot open '%s': %s\n",
- ERROR + FILE_NOT_FOUND, targ, strerror(errno));
- return;
- }
- cprintf("%d %s\n", LISTING_FOLLOWS, buf);
-
- while (fgets(buf, (sizeof buf - 1), mfp) != NULL) {
- buf[strlen(buf)-1] = 0;
- do_help_subst(buf);
- cprintf("%s\n",buf);
- }
-
- fclose(mfp);
- cprintf("000\n");
-}
-
-
-/*
- * enter system messages or help
- */
-void cmd_emsg(char *mname)
-{
- FILE *mfp;
- char targ[256];
- char buf[256];
- int a;
-
- unbuffer_output();
-
- if (CtdlAccessCheck(ac_aide)) return;
-
- extract_token(buf, mname, 0, '|', sizeof buf);
- for (a=0; !IsEmptyStr(&buf[a]); ++a) { /* security measure */
- if (buf[a] == '/') buf[a] = '.';
- }
-
- if (IsEmptyStr(targ)) {
- snprintf(targ, sizeof targ, "%s/%s", ctdl_message_dir, buf);
- }
-
- mfp = fopen(targ, "w");
- if (mfp==NULL) {
- cprintf("%d Cannot open '%s': %s\n",
- ERROR + INTERNAL_ERROR, targ, strerror(errno));
- return;
- }
- cprintf("%d %s\n", SEND_LISTING, targ);
-
- while (client_getln(buf, sizeof buf) >=0 && strcmp(buf, "000")) {
- fprintf(mfp, "%s\n", buf);
- }
-
- fclose(mfp);
-}
-
-/*****************************************************************************/
-/* MODULE INITIALIZATION STUFF */
-/*****************************************************************************/
-
-CTDL_MODULE_INIT(file_ops)
-{
- if (!threading) {
- CtdlRegisterSessionHook(files_logout_hook, EVT_LOGOUT, PRIO_LOGOUT + 8);
- CtdlRegisterProtoHook(cmd_delf, "DELF", "Delete a file");
- CtdlRegisterProtoHook(cmd_movf, "MOVF", "Move a file");
- CtdlRegisterProtoHook(cmd_open, "OPEN", "Open a download file transfer");
- CtdlRegisterProtoHook(cmd_clos, "CLOS", "Close a download file transfer");
- CtdlRegisterProtoHook(cmd_uopn, "UOPN", "Open an upload file transfer");
- CtdlRegisterProtoHook(cmd_ucls, "UCLS", "Close an upload file transfer");
- CtdlRegisterProtoHook(cmd_read, "READ", "File transfer read operation");
- CtdlRegisterProtoHook(cmd_writ, "WRIT", "File transfer write operation");
- CtdlRegisterProtoHook(cmd_oimg, "OIMG", "Open an image file for download");
- CtdlRegisterProtoHook(cmd_uimg, "UIMG", "Upload an image file");
- CtdlRegisterProtoHook(cmd_mesg, "MESG", "fetch system banners");
- CtdlRegisterProtoHook(cmd_emsg, "EMSG", "submit system banners");
- }
- /* return our Subversion id for the Log */
- return "file_ops";
-}
projects / citadel.git / blobdiff