HTTP Gateway * Download: https://news.novabbs.com/getrslight * * Based on Newsportal by Florian Amrhein * * E-Mail: retroguy@novabbs.com * Web: https://news.novabbs.com * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA */ @session_start(); /* * Encode lines with 8bit-characters to quote-printable * * $line: the to be encoded line * * the function returns a sting containing the quoted-printable encoded * $line */ function encode_subject($line) { $newstring = mb_encode_mimeheader(quoted_printable_decode($line)); return $newstring; } if (! function_exists('quoted_printable_encode')) { function quoted_printable_encode($line) { global $www_charset; $qp_table = array( '=00', '=01', '=02', '=03', '=04', '=05', '=06', '=07', '=08', '=09', '=0A', '=0B', '=0C', '=0D', '=0E', '=0F', '=10', '=11', '=12', '=13', '=14', '=15', '=16', '=17', '=18', '=19', '=1A', '=1B', '=1C', '=1D', '=1E', '=1F', '_', '!', '"', '#', '$', '%', '&', "'", '(', ')', '*', '+', ',', '-', '.', '/', '0', '1', '2', '3', '4', '5', '6', '7', '8', '9', ':', ';', '<', '=3D', '>', '=3F', '@', 'A', 'B', 'C', 'D', 'E', 'F', 'G', 'H', 'I', 'J', 'K', 'L', 'M', 'N', 'O', 'P', 'Q', 'R', 'S', 'T', 'U', 'V', 'W', 'X', 'Y', 'Z', '[', '\\', ']', '^', '=5F', '', 'a', 'b', 'c', 'd', 'e', 'f', 'g', 'h', 'i', 'j', 'k', 'l', 'm', 'n', 'o', 'p', 'q', 'r', 's', 't', 'u', 'v', 'w', 'x', 'y', 'z', '{', '|', '}', '~', '=7F', '=80', '=81', '=82', '=83', '=84', '=85', '=86', '=87', '=88', '=89', '=8A', '=8B', '=8C', '=8D', '=8E', '=8F', '=90', '=91', '=92', '=93', '=94', '=95', '=96', '=97', '=98', '=99', '=9A', '=9B', '=9C', '=9D', '=9E', '=9F', '=A0', '=A1', '=A2', '=A3', '=A4', '=A5', '=A6', '=A7', '=A8', '=A9', '=AA', '=AB', '=AC', '=AD', '=AE', '=AF', '=B0', '=B1', '=B2', '=B3', '=B4', '=B5', '=B6', '=B7', '=B8', '=B9', '=BA', '=BB', '=BC', '=BD', '=BE', '=BF', '=C0', '=C1', '=C2', '=C3', '=C4', '=C5', '=C6', '=C7', '=C8', '=C9', '=CA', '=CB', '=CC', '=CD', '=CE', '=CF', '=D0', '=D1', '=D2', '=D3', '=D4', '=D5', '=D6', '=D7', '=D8', '=D9', '=DA', '=DB', '=DC', '=DD', '=DE', '=DF', '=E0', '=E1', '=E2', '=E3', '=E4', '=E5', '=E6', '=E7', '=E8', '=E9', '=EA', '=EB', '=EC', '=ED', '=EE', '=EF', '=F0', '=F1', '=F2', '=F3', '=F4', '=F5', '=F6', '=F7', '=F8', '=F9', '=FA', '=FB', '=FC', '=FD', '=FE', '=FF' ); // are there "forbidden" characters in the string? for ($i = 0; $i < strlen($line) && ord($line[$i]) <= 127; $i ++); if ($i < strlen($line)) { // yes, there are. So lets encode them! $from = $i; for ($to = strlen($line) - 1; ord($line[$to]) <= 127; $to --); // lets scan for the start and the end of the to be encoded _words_ for (; $from > 0 && $line[$from] != ' '; $from --); if ($from > 0) $from ++; for (; $to < strlen($line) && $line[$to] != ' '; $to ++); // split the string into the to be encoded middle and the rest $begin = substr($line, 0, $from); $middle = substr($line, $from, $to - $from); $end = substr($line, $to); // ok, now lets encode $middle... $newmiddle = ""; for ($i = 0; $i < strlen($middle); $i ++) $newmiddle .= $qp_table[ord($middle[$i])]; // now we glue the parts together... $line = $begin . '=?' . $www_charset . '?Q?' . $newmiddle . '?=' . $end; } return $line; } } /* * generate a message-id for posting. * $identity: a string containing informations about the article, to * make a md5-hash out of it. * * returns: a complete message-id */ function generate_msgid($identity) { global $CONFIG, $msgid_generate, $msgid_fqdn; switch ($msgid_generate) { case "no": // no, we don't want to generate a message-id. return false; break; case "md5": if ($CONFIG['server_path'][0] !== '@') { $mymsgid = '@' . $CONFIG['server_path']; } else { $mymsgid = $CONFIG['server_path']; } return '<' . md5($identity) . $mymsgid . '>'; break; default: return false; break; } } function check_rate_limit($name, $set = 0, $gettime = 0) { global $CONFIG, $spooldir; if (strcasecmp($name, $CONFIG['anonusername']) == 0) { $name = session_id(); } $ratefile = $spooldir . '/' . strtolower($name) . '-rate.dat'; $postqty = 0; $first = 0; $newrate = array(); if (is_file($ratefile)) { $ratedata = ''; $ratefp = fopen($ratefile, 'r'); while (! feof($ratefp)) { $ratedata .= fgets($ratefp, 1000); } fclose($ratefp); $rate = unserialize($ratedata); sort($rate); foreach ($rate as $ratepost) { if ($ratepost > (time() - 3600)) { $postqty = $postqty + 1; $newrate[] = $ratepost; if ($first == 0) { $oldest = $ratepost; $first = 1; } } } } $newrate[] = time(); if ($set) { $ratefp = fopen($ratefile, 'w'); fputs($ratefp, serialize($newrate)); fclose($ratefp); $postqty = $postqty + 1; } $rate_limit = get_user_config($name, 'rate_limit'); if (($rate_limit !== FALSE) && ($rate_limit > 0)) { $CONFIG['rate_limit'] = $rate_limit; } $postsremaining = $CONFIG['rate_limit'] - $postqty; if ($gettime) { $wait = (3600 - (time() - $oldest)) / 60; return ($wait); } else { return ($postsremaining); } } /* * Post an article to a newsgroup * * $subject: The Subject of the article * $from: The authors name and email of the article * $newsgroups: The groups to post to * $ref: The references of the article * $body: The article itself */ function message_post($subject, $from, $newsgroups, $ref, $body, $encryptthis = null, $encryptto = null, $authname = null, $fromname, $followupto = null, $do_attach = null) { global $server, $port, $send_poster_host, $text_error, $CONFIG, $OVERRIDES; global $www_charset, $config_dir, $spooldir; global $msgid_generate, $msgid_fqdn, $rslight_version; flush(); $attachment_temp_dir = $spooldir . "/tmp/"; if (! is_dir($attachment_temp_dir)) { mkdir($attachment_temp_dir); } $myconfig = false; if (file_exists($config_dir . '/userconfig/' . $authname . '.config')) { $userconfig = unserialize(file_get_contents($config_dir . '/userconfig/' . $authname . '.config')); $myconfig = true; } if (isset($encryptthis)) { $workpath = $config_dir . "users/"; $username = trim(strtolower($encryptto)); $userFilename = $workpath . $username; if ((! is_file($userFilename)) || $encryptto == $CONFIG['anonusername']) { $response = "Cannot encrypt to $encryptto. No such user"; return $response; } } $msgid = generate_msgid($subject . "," . $from . "," . $newsgroups . "," . $ref . "," . $body); /* * SPAM CHECK */ if (isset($CONFIG['spamassassin']) && ($CONFIG['spamassassin'] == true) && ($CONFIG['enable_nntp'] != true)) { $spam_result_array = check_spam($subject, $from, $newsgroups, $ref, $body, $msgid, true); $res = $spam_result_array['res']; $spamresult = $spam_result_array['spamresult']; $spamcheckerversion = $spam_result_array['spamcheckerversion']; $spamlevel = $spam_result_array['spamlevel']; } if ($do_attach) { move_uploaded_file($_FILES["photo"]["tmp_name"], $attachment_temp_dir . $_FILES["photo"]["name"]); if ($authname != null) { $uploadname = $authname; } else { $uploadname = $CONFIG['anonusername']; } if (! is_dir($spooldir . '/upload/' . $uploadname)) { mkdir($spooldir . '/upload/' . $uploadname); } // Copy attachment to user's upload directory copy($attachment_temp_dir . $_FILES["photo"]["name"], $spooldir . '/upload/' . $uploadname . '/' . $_FILES["photo"]["name"]); } $ns = nntp_open($server, $port); if ($ns != false) { fputs($ns, "POST\r\n"); $weg = line_read($ns); $t = explode(' ', $weg); if ($t[0] != "340") { nntp_close($ns); return $weg; } fputs($ns, 'Subject: ' . encode_subject($subject) . "\r\n"); // For Synchronet use if (isset($CONFIG['synchronet']) && ($CONFIG['synchronet'] == true)) { if (! isset($fromname) || trim($fromname) == '') { $fromname = 'ALL'; } fputs($ns, 'To: ' . $fromname . "\r\n"); fputs($ns, 'X-Comment-To: ' . $fromname . "\r\n"); } // X-Rslight headers if ((isset($CONFIG['spamassassin']) && ($CONFIG['spamassassin'] == true))) { if ($res === 1) { fputs($ns, $spamcheckerversion . "\r\n"); if (strpos($spamlevel, '*') !== false) fputs($ns, $spamlevel . "\r\n"); if ($res === 1) { fputs($ns, "X-Rslight-Original-Group: " . $newsgroups . "\r\n"); $newsgroups = $CONFIG['spamgroup']; } } } // Check for custom name/email from user configuration if ($OVERRIDES['disable_change_name'] != true) { $user_config = unserialize(file_get_contents($config_dir . '/userconfig/' . $authname . '.config')); if (trim($user_config['display_name']) == '') { unset($user_config['display_name']); } if (trim($user_config['display_email']) == '') { unset($user_config['display_email']); } if (isset($user_config['display_name']) && isset($user_config['display_email'])) { fputs($ns, 'From: ' . $user_config['display_name'] . ' <' . $user_config['display_email'] . ">\r\n"); } else { fputs($ns, 'From: ' . $from . "\r\n"); } } else { fputs($ns, 'From: ' . $from . "\r\n"); } if ($followupto !== null) { fputs($ns, 'Followup-To: ' . $followupto . "\r\n"); } fputs($ns, 'Newsgroups: ' . $newsgroups . "\r\n"); $sitekey = password_hash($CONFIG['thissitekey'] . $msgid, PASSWORD_DEFAULT); $posting_user = hash('sha1', $from . $CONFIG['thissitekey'] . $_SERVER['HTTP_HOST']); fputs($ns, 'X-Rslight-Site: ' . $sitekey . "\r\n"); fputs($ns, 'X-Rslight-Posting-User: ' . $posting_user . "\r\n"); if (isset($encryptthis)) { fputs($ns, 'X-Rslight-To: ' . $encryptto . "\r\n"); $CONFIG['postfooter'] = ""; } fputs($ns, "Mime-Version: 1.0\r\n"); if ($do_attach == null) { fputs($ns, "Content-Type: text/plain; charset=" . $www_charset . "; format=flowed\r\n"); fputs($ns, "Content-Transfer-Encoding: 8bit\r\n"); } fputs($ns, "User-Agent: Rocksolid Light\r\n"); if ($send_poster_host) @fputs($ns, 'X-HTTP-Posting-Host: ' . gethostbyaddr(getenv("REMOTE_ADDR")) . "\r\n"); if (($ref != false) && (count($ref) > 0)) { // strip references if (strlen(implode(" ", $ref)) > 900) { $ref_first = array_shift($ref); do { $ref = array_slice($ref, 1); } while (strlen(implode(" ", $ref)) > 800); array_unshift($ref, $ref_first); } fputs($ns, 'References: ' . implode(" ", $ref) . "\r\n"); } if (isset($CONFIG['organization'])) fputs($ns, 'Organization: ' . quoted_printable_encode($CONFIG['organization']) . "\r\n"); $body = trim($body); if ($userconfig['signature'] !== '' && $myconfig) { $body .= "\n\n-- \n" . $userconfig['signature']; } else { if ((isset($CONFIG['postfooter'])) && ($CONFIG['postfooter'] != "")) { $postfooter = preg_replace('/\{DOMAIN\}/', "\n" . $_SERVER['HTTP_HOST'], $CONFIG['postfooter']); $body .= "\n\n-- \n" . $postfooter; } } if ($do_attach) { $boundary = uniqid('', true); $body .= "\r\n--------------" . $boundary . "\r\n"; } fputs($ns, 'Message-ID: ' . $msgid . "\r\n"); if ($userconfig['xface'] !== '' && $myconfig) { fputs($ns, 'X-Face: ' . $userconfig['xface'] . "\r\n"); } if ($do_attach) { fputs($ns, 'Content-Type: multipart/mixed;boundary="------------' . $boundary . '"'); fputs($ns, "\r\n"); $contenttype = shell_exec('file -b --mime-type ' . $attachment_temp_dir . $_FILES['photo']['name']); $contenttype = rtrim($contenttype); $b64file = shell_exec('uuencode -m ' . $attachment_temp_dir . $_FILES['photo']['name'] . ' ' . $_FILES['photo']['name'] . ' | grep -v \'begin-base64\|====\''); $body .= 'Content-Type: ' . $contenttype . ';'; $body .= "\r\n name=" . $_FILES['photo']['name']; $body .= "\r\nContent-Transfer-Encoding: base64"; $body .= "\r\nContent-Disposition: attachment;"; $body .= "\r\n filename=" . $_FILES['photo']['name']; $body .= "\r\n"; $body .= "\r\n" . $b64file; $body .= "\r\n--------------" . $boundary . "--\r\n"; } // Headers end here $body = str_replace("\n.\r", "\n..\r", $body); $body = str_replace("\r", '', $body); $body = stripSlashes($body); if ($do_attach) { fputs($ns, "\r\nThis is a multi-part message in MIME format.\r\n"); fputs($ns, "--------------" . $boundary . "\r\n"); fputs($ns, "Content-Type: text/plain; charset=utf-8\r\n"); fputs($ns, "Content-Transfer-Encoding: 7bit\r\n"); } // Encrypt? if (isset($encryptthis)) { $encryptkey = get_user_config($encryptto, "encryptionkey"); $body = chunk_split(rslight_encrypt($body, $encryptkey)); $body = "-- RSLIGHT DAT START\n" . $body . "-- RSLIGHT DAT END\n"; } $body = rtrim($body); fputs($ns, "\r\n" . $body . "\r\n.\r\n"); $message = line_read($ns); nntp_close($ns); if ($do_attach) { // clean up attachment file unlink($attachment_temp_dir . $_FILES["photo"]["name"]); } } else { $message = $text_error["post_failed"]; } // let thread.php ignore the cache for this group, so this new // article will be visible instantly $groupsarr = explode(",", $newsgroups); foreach ($groupsarr as $newsgroup) { $cachefile = $spooldir . '/' . $newsgroup . '-cache.txt'; @unlink($cachefile); } return $message; } ?>