File: cmd_attachments.c

package info (click to toggle)
prayer 1.3.5-dfsg1-8
  • links: PTS, VCS
  • area: main
  • in suites: bullseye
  • size: 6,596 kB
  • sloc: ansic: 43,163; makefile: 817; sh: 445; perl: 166
file content (143 lines) | stat: -rw-r--r-- 4,848 bytes parent folder | download | duplicates (6)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
/* $Cambridge: hermes/src/prayer/cmd/cmd_attachments.c,v 1.4 2008/09/17 17:20:25 dpc22 Exp $ */
/************************************************
 *    Prayer - a Webmail Interface              *
 ************************************************/

/* Copyright (c) University of Cambridge 2000 - 2008 */
/* See the file NOTICE for conditions of use and distribution. */

#include "prayer_session.h"

static void generate_form(struct session *session)
{
    struct template_vals *tvals = session->template_vals;
    struct request *request = session->request;
    struct draft *draft = session->draft;
    struct buffer *b = request->write_buffer;
    unsigned long count;
    struct attlist *a;

    for (count = 0, a = draft->attlist; a; a = a->next, count++) {
        template_vals_foreach_init(tvals, "@atts", count);
        template_vals_foreach_ulong(tvals, "@atts", count, "offset", count+1);
        template_vals_foreach_string(tvals, "@atts", count, "name", a->name);
        template_vals_foreach_string(tvals, "@atts", count, "type", a->type);
        template_vals_foreach_ulong(tvals, "@atts", count, "size", a->size);
    }

    session_seed_template(session, tvals);
    template_expand("attachments", tvals, b);
    response_html(request, 200);        /* Success */
}

static void process_form(struct session *session)
{
    struct config *config = session->config;
    struct request *request = session->request;
    struct draft *draft = session->draft;
    struct assoc *hdrs = assoc_create(request->pool, 16, T);
    char *start, *end;
    char *type, *disp, *encoding, *name, *s;
    unsigned long len;

    if (!request_decode_post_multipart(request, hdrs, &start, &end))
        return;

    if (end > start)
        len = (char *) end - (char *) start;
    else
        len = 0;

    if (len < 1) {
	session_alert(session, "Please choose a file to attach");
        return;
    }

    if ((config->draft_att_single_max > 0) &&
        (len > config->draft_att_single_max)) {
        session_alert(session,
                      "Attachment too large: %lu bytes exceeds limit %lu",
                      len, config->draft_att_single_max);
        session_log(session,
                    ("[cmd_attachments] Attachment too large: "
                     "%lu bytes exceeds limit %lu"),
                    len, config->draft_att_single_max);
        return;
    }

    if ((config->draft_att_total_max > 0) &&
        ((len + draft_att_size(draft)) > config->draft_att_total_max)) {
        session_alert(session,
                      "Total size of attachments exceeds limit: %lu bytes",
                      config->draft_att_total_max);
        session_log(session,
                    ("[cmd_attachments] Total size of attachments "
                     "exceeds limit: %lu bytes"),
                    config->draft_att_total_max);
        return;
    }


    if (!(type = assoc_lookup(hdrs, "content-type")))
        type = "application/octet-stream";

    /* Opera attaches filename to Content-Type header e.g:
     *   Content-Type: application/octet-stream; name="<whatever>"
     */
    if ((s = strchr(type, ';')))
        *s = '\0';

    if (!(encoding = assoc_lookup(hdrs, "content-transfer-encoding")))
        encoding = "";

    name = "";

    if ((disp = assoc_lookup(hdrs, "content-disposition"))) {
        for (s = disp; *s; s++) {
            if (!strncasecmp(s, "filename=\"", strlen("filename=\""))) {
                name = s = s + strlen("filename=\"");
                while (*s && (*s != '"'))
                    s++;
                *s = '\0';
                name = string_trim_whitespace(name);
                break;
            } else if (!strncasecmp(s, "filename=", strlen("filename="))) {
                name = s + strlen("filename=");
                name = string_trim_whitespace(name);
                break;
            }
        }
    }

    /* Isolate last component of name */
    if ((s = strrchr(name, '/')))       /* Unix names */
        name = s + 1;
    else if ((s = strrchr(name, '\\'))) /* Windows names */
        name = s + 1;

    /* Mac Netscape sends names with URL encoding. Sigh! */
    if (name && name[0])
        name = string_url_decode(name);

    draft_add_attachment(draft, name, type, encoding, NIL, 0, start, len);

    session_message(session, "Added attachment \"%s\"", name);
    session_log(session,
                "[cmd_attachments] Added attachment \"%s\" (%lu bytes)",
                name, len);
}

void cmd_attachments(struct session *session)
{
    struct request *request = session->request;

    if ((request->argc >= 2) && (!strcmp(request->argv[1], "cancel"))) {
        session_redirect(session, request, "compose");
        return;
    }

    if (request->method == POST)
        process_form(session);

    generate_form(session);
}