<?php
/*
 * rslight NNTP<->HTTP Gateway
 * Download: https://news.novabbs.com/getrslight
 *
 * Based on Newsportal by Florian Amrhein
 *
 * E-Mail: retroguy@novabbs.com
 * Web: https://news.novabbs.com
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
 */
@session_start();

/*
 * Encode lines with 8bit-characters to quote-printable
 *
 * $line: the to be encoded line
 *
 * the function returns a sting containing the quoted-printable encoded
 * $line
 */
function encode_subject($line)
{
    $newstring = mb_encode_mimeheader(quoted_printable_decode($line));
    return $newstring;
}

if (! function_exists('quoted_printable_encode')) {

    function quoted_printable_encode($line)
    {
        global $www_charset;
        $qp_table = array(
            '=00',
            '=01',
            '=02',
            '=03',
            '=04',
            '=05',
            '=06',
            '=07',
            '=08',
            '=09',
            '=0A',
            '=0B',
            '=0C',
            '=0D',
            '=0E',
            '=0F',
            '=10',
            '=11',
            '=12',
            '=13',
            '=14',
            '=15',
            '=16',
            '=17',
            '=18',
            '=19',
            '=1A',
            '=1B',
            '=1C',
            '=1D',
            '=1E',
            '=1F',
            '_',
            '!',
            '"',
            '#',
            '$',
            '%',
            '&',
            "'",
            '(',
            ')',
            '*',
            '+',
            ',',
            '-',
            '.',
            '/',
            '0',
            '1',
            '2',
            '3',
            '4',
            '5',
            '6',
            '7',
            '8',
            '9',
            ':',
            ';',
            '<',
            '=3D',
            '>',
            '=3F',
            '@',
            'A',
            'B',
            'C',
            'D',
            'E',
            'F',
            'G',
            'H',
            'I',
            'J',
            'K',
            'L',
            'M',
            'N',
            'O',
            'P',
            'Q',
            'R',
            'S',
            'T',
            'U',
            'V',
            'W',
            'X',
            'Y',
            'Z',
            '[',
            '\\',
            ']',
            '^',
            '=5F',
            '',
            'a',
            'b',
            'c',
            'd',
            'e',
            'f',
            'g',
            'h',
            'i',
            'j',
            'k',
            'l',
            'm',
            'n',
            'o',
            'p',
            'q',
            'r',
            's',
            't',
            'u',
            'v',
            'w',
            'x',
            'y',
            'z',
            '{',
            '|',
            '}',
            '~',
            '=7F',
            '=80',
            '=81',
            '=82',
            '=83',
            '=84',
            '=85',
            '=86',
            '=87',
            '=88',
            '=89',
            '=8A',
            '=8B',
            '=8C',
            '=8D',
            '=8E',
            '=8F',
            '=90',
            '=91',
            '=92',
            '=93',
            '=94',
            '=95',
            '=96',
            '=97',
            '=98',
            '=99',
            '=9A',
            '=9B',
            '=9C',
            '=9D',
            '=9E',
            '=9F',
            '=A0',
            '=A1',
            '=A2',
            '=A3',
            '=A4',
            '=A5',
            '=A6',
            '=A7',
            '=A8',
            '=A9',
            '=AA',
            '=AB',
            '=AC',
            '=AD',
            '=AE',
            '=AF',
            '=B0',
            '=B1',
            '=B2',
            '=B3',
            '=B4',
            '=B5',
            '=B6',
            '=B7',
            '=B8',
            '=B9',
            '=BA',
            '=BB',
            '=BC',
            '=BD',
            '=BE',
            '=BF',
            '=C0',
            '=C1',
            '=C2',
            '=C3',
            '=C4',
            '=C5',
            '=C6',
            '=C7',
            '=C8',
            '=C9',
            '=CA',
            '=CB',
            '=CC',
            '=CD',
            '=CE',
            '=CF',
            '=D0',
            '=D1',
            '=D2',
            '=D3',
            '=D4',
            '=D5',
            '=D6',
            '=D7',
            '=D8',
            '=D9',
            '=DA',
            '=DB',
            '=DC',
            '=DD',
            '=DE',
            '=DF',
            '=E0',
            '=E1',
            '=E2',
            '=E3',
            '=E4',
            '=E5',
            '=E6',
            '=E7',
            '=E8',
            '=E9',
            '=EA',
            '=EB',
            '=EC',
            '=ED',
            '=EE',
            '=EF',
            '=F0',
            '=F1',
            '=F2',
            '=F3',
            '=F4',
            '=F5',
            '=F6',
            '=F7',
            '=F8',
            '=F9',
            '=FA',
            '=FB',
            '=FC',
            '=FD',
            '=FE',
            '=FF'
        );
        // are there "forbidden" characters in the string?
        for ($i = 0; $i < strlen($line) && ord($line[$i]) <= 127; $i ++);
        if ($i < strlen($line)) { // yes, there are. So lets encode them!
            $from = $i;
            for ($to = strlen($line) - 1; ord($line[$to]) <= 127; $to --);
            // lets scan for the start and the end of the to be encoded _words_
            for (; $from > 0 && $line[$from] != ' '; $from --);
            if ($from > 0)
                $from ++;
            for (; $to < strlen($line) && $line[$to] != ' '; $to ++);
            // split the string into the to be encoded middle and the rest
            $begin = substr($line, 0, $from);
            $middle = substr($line, $from, $to - $from);
            $end = substr($line, $to);
            // ok, now lets encode $middle...
            $newmiddle = "";
            for ($i = 0; $i < strlen($middle); $i ++)
                $newmiddle .= $qp_table[ord($middle[$i])];
            // now we glue the parts together...
            $line = $begin . '=?' . $www_charset . '?Q?' . $newmiddle . '?=' . $end;
        }
        return $line;
    }
}

/*
 * generate a message-id for posting.
 * $identity: a string containing informations about the article, to
 * make a md5-hash out of it.
 *
 * returns: a complete message-id
 */
function generate_msgid($identity)
{
    global $CONFIG, $msgid_generate, $msgid_fqdn;
    switch ($msgid_generate) {
        case "no":
            // no, we don't want to generate a message-id.
            return false;
            break;
        case "md5":
            if ($CONFIG['email_tail'][0] !== '@') {
                $mymsgid = '@' . $CONFIG['email_tail'];
            } else {
                $mymsgid = $CONFIG['email_tail'];
            }
            return '<' . md5($identity) . $mymsgid . '>';
            break;
        default:
            return false;
            break;
    }
}

function check_rate_limit($name, $set = 0, $gettime = 0)
{
    global $CONFIG, $spooldir;
    if (strcasecmp($name, $CONFIG['anonusername']) == 0) {
        $name = session_id();
    }
    $ratefile = $spooldir . '/' . strtolower($name) . '-rate.dat';
    $postqty = 0;
    $first = 0;
    $newrate = array();
    if (is_file($ratefile)) {
        $ratedata = '';
        $ratefp = fopen($ratefile, 'r');
        while (! feof($ratefp)) {
            $ratedata .= fgets($ratefp, 1000);
        }
        fclose($ratefp);
        $rate = unserialize($ratedata);
        sort($rate);
        foreach ($rate as $ratepost) {
            if ($ratepost > (time() - 3600)) {
                $postqty = $postqty + 1;
                $newrate[] = $ratepost;
                if ($first == 0) {
                    $oldest = $ratepost;
                    $first = 1;
                }
            }
        }
    }
    $newrate[] = time();
    if ($set) {
        $ratefp = fopen($ratefile, 'w');
        fputs($ratefp, serialize($newrate));
        fclose($ratefp);
        $postqty = $postqty + 1;
    }
    $rate_limit = get_user_config($name, 'rate_limit');
    if (($rate_limit !== FALSE) && ($rate_limit > 0)) {
        $CONFIG['rate_limit'] = $rate_limit;
    }
    $postsremaining = $CONFIG['rate_limit'] - $postqty;
    if ($gettime) {
        $wait = (3600 - (time() - $oldest)) / 60;
        return ($wait);
    } else {
        return ($postsremaining);
    }
}

/*
 * Post an article to a newsgroup
 *
 * $subject: The Subject of the article
 * $from: The authors name and email of the article
 * $newsgroups: The groups to post to
 * $ref: The references of the article
 * $body: The article itself
 */
function message_post($subject, $from, $newsgroups, $ref, $body, $encryptthis = null, $encryptto = null, $authname = null, $fromname, $followupto = null, $do_attach = null)
{
    global $server, $port, $send_poster_host, $text_error, $CONFIG;
    global $www_charset, $config_dir, $spooldir;
    global $msgid_generate, $msgid_fqdn, $rslight_version;
    
    flush();
    $attachment_temp_dir = $spooldir . "/tmp/";
    if (! is_dir($attachment_temp_dir)) {
        mkdir($attachment_temp_dir);
    }
    $myconfig = false;
    if (file_exists($config_dir . '/userconfig/' . $authname . '.config')) {
        $userconfig = unserialize(file_get_contents($config_dir . '/userconfig/' . $authname . '.config'));
        $myconfig = true;
    }
    if (isset($encryptthis)) {
        $workpath = $config_dir . "users/";
        $username = trim(strtolower($encryptto));
        $userFilename = $workpath . $username;
        if ((! is_file($userFilename)) || $encryptto == $CONFIG['anonusername']) {
            $response = "Cannot encrypt to $encryptto. No such user";
            return $response;
        }
    }

    $msgid = generate_msgid($subject . "," . $from . "," . $newsgroups . "," . $ref . "," . $body);
    /*
     * SPAM CHECK
     */
    if (isset($CONFIG['spamassassin']) && ($CONFIG['spamassassin'] == true) && ($CONFIG['enable_nntp'] != true)) {
        $spam_result_array = check_spam($subject, $from, $newsgroups, $ref, $body, $msgid, true);
        $res = $spam_result_array['res'];
        $spamresult = $spam_result_array['spamresult'];
        $spamcheckerversion = $spam_result_array['spamcheckerversion'];
        $spamlevel = $spam_result_array['spamlevel'];
    }
    if ($do_attach) {
        move_uploaded_file($_FILES["photo"]["tmp_name"], $attachment_temp_dir . $_FILES["photo"]["name"]);
        if ($authname != null) {
            $uploadname = $authname;
        } else {
            $uploadname = $CONFIG['anonusername'];
        }
        if (! is_dir($spooldir . '/upload/' . $uploadname)) {
            mkdir($spooldir . '/upload/' . $uploadname);
        }
        // Copy attachment to user's upload directory
        copy($attachment_temp_dir . $_FILES["photo"]["name"], $spooldir . '/upload/' . $uploadname . '/' . $_FILES["photo"]["name"]);
    }
    $ns = nntp_open($server, $port);
    if ($ns != false) {
        fputs($ns, "POST\r\n");
        $weg = line_read($ns);
        $t = explode(' ', $weg);
        if ($t[0] != "340") {
            nntp_close($ns);
            return $weg;
        }

        fputs($ns, 'Subject: ' . encode_subject($subject) . "\r\n");
        // For Synchronet use
        if (isset($CONFIG['synchronet']) && ($CONFIG['synchronet'] == true)) {
            if(!isset($fromname) || trim($fromname) == '') {
                $fromname = 'ALL';
            }
            fputs($ns, 'To: ' . $fromname . "\r\n");
            fputs($ns, 'X-Comment-To: ' . $fromname . "\r\n");
        }

        // X-Rslight headers

        if ((isset($CONFIG['spamassassin']) && ($CONFIG['spamassassin'] == true))) {
            if ($res === 1) {
                fputs($ns, $spamcheckerversion . "\r\n");
                if (strpos($spamlevel, '*') !== false)
                    fputs($ns, $spamlevel . "\r\n");
                if ($res === 1) {
                    fputs($ns, "X-Rslight-Original-Group: " . $newsgroups . "\r\n");
                    $newsgroups = $CONFIG['spamgroup'];
                }
            }
        }

        fputs($ns, 'From: ' . $from . "\r\n");
        if ($followupto !== null) {
            fputs($ns, 'Followup-To: ' . $followupto . "\r\n");
        }
        fputs($ns, 'Newsgroups: ' . $newsgroups . "\r\n");
        $sitekey = password_hash($CONFIG['thissitekey'] . $msgid, PASSWORD_DEFAULT);
        $posting_user = hash('sha1', $from . $CONFIG['thissitekey'] . $_SERVER['HTTP_HOST']);
        fputs($ns, 'X-Rslight-Site: ' . $sitekey . "\r\n");
        fputs($ns, 'X-Rslight-Posting-User: ' . $posting_user . "\r\n");
        if (isset($encryptthis)) {
            fputs($ns, 'X-Rslight-To: ' . $encryptto . "\r\n");
            $CONFIG['postfooter'] = "";
        }
        fputs($ns, "Mime-Version: 1.0\r\n");
        if ($do_attach == null) {
            fputs($ns, "Content-Type: text/plain; charset=" . $www_charset . "; format=flowed\r\n");
            fputs($ns, "Content-Transfer-Encoding: 8bit\r\n");
        }
        fputs($ns, "User-Agent: Rocksolid Light\r\n");
        if ($send_poster_host)
            @fputs($ns, 'X-HTTP-Posting-Host: ' . gethostbyaddr(getenv("REMOTE_ADDR")) . "\r\n");
        if (($ref != false) && (count($ref) > 0)) {
            // strip references
            if (strlen(implode(" ", $ref)) > 900) {
                $ref_first = array_shift($ref);
                do {
                    $ref = array_slice($ref, 1);
                } while (strlen(implode(" ", $ref)) > 800);
                array_unshift($ref, $ref_first);
            }
            fputs($ns, 'References: ' . implode(" ", $ref) . "\r\n");
        }
        if (isset($CONFIG['organization']))
            fputs($ns, 'Organization: ' . quoted_printable_encode($CONFIG['organization']) . "\r\n");
        $body = trim($body);
        if ($userconfig['signature'] !== '' && $myconfig) {
            $body .= "\n\n-- \n" . $userconfig['signature'];
        } else {
            if ((isset($CONFIG['postfooter'])) && ($CONFIG['postfooter'] != "")) {
                $postfooter = preg_replace('/\{DOMAIN\}/', "\n" . $_SERVER['HTTP_HOST'], $CONFIG['postfooter']);
                $body .= "\n\n-- \n" . $postfooter;
            }
        }
        if ($do_attach) {
            $boundary = uniqid('', true);
            $body .= "\r\n--------------" . $boundary . "\r\n";
        }
        fputs($ns, 'Message-ID: ' . $msgid . "\r\n");
        if ($userconfig['xface'] !== '' && $myconfig) {
            fputs($ns, 'X-Face: ' . $userconfig['xface'] . "\r\n");
        }
        if ($do_attach) {
            fputs($ns, 'Content-Type: multipart/mixed;boundary="------------' . $boundary . '"');
            fputs($ns, "\r\n");
            $contenttype = shell_exec('file -b --mime-type ' . $attachment_temp_dir . $_FILES['photo']['name']);
            $contenttype = rtrim($contenttype);
            $b64file = shell_exec('uuencode -m ' . $attachment_temp_dir . $_FILES['photo']['name'] . ' ' . $_FILES['photo']['name'] . ' | grep -v \'begin-base64\|====\'');
            $body .= 'Content-Type: ' . $contenttype . ';';
            $body .= "\r\n name=" . $_FILES['photo']['name'];
            $body .= "\r\nContent-Transfer-Encoding: base64";
            $body .= "\r\nContent-Disposition: attachment;";
            $body .= "\r\n filename=" . $_FILES['photo']['name'];
            $body .= "\r\n";
            $body .= "\r\n" . $b64file;
            $body .= "\r\n--------------" . $boundary . "--\r\n";
        }
        // Headers end here
        $body = str_replace("\n.\r", "\n..\r", $body);
        $body = str_replace("\r", '', $body);
        $body = stripSlashes($body);
        if ($do_attach) {
            fputs($ns, "\r\nThis is a multi-part message in MIME format.\r\n");
            fputs($ns, "--------------" . $boundary . "\r\n");
            fputs($ns, "Content-Type: text/plain; charset=utf-8\r\n");
            fputs($ns, "Content-Transfer-Encoding: 7bit\r\n");
        }
        // Encrypt?
        if (isset($encryptthis)) {
            $encryptkey = get_user_config($encryptto, "encryptionkey");

            $body = chunk_split(rslight_encrypt($body, $encryptkey));
            $body = "-- RSLIGHT DAT START\n" . $body . "-- RSLIGHT DAT END\n";
        }
        $body = rtrim($body);
        fputs($ns, "\r\n" . $body . "\r\n.\r\n");
        $message = line_read($ns);
        nntp_close($ns);
        if ($do_attach) {
            // clean up attachment file
            unlink($attachment_temp_dir . $_FILES["photo"]["name"]);
        }
    } else {
        $message = $text_error["post_failed"];
    }
    // let thread.php ignore the cache for this group, so this new
    // article will be visible instantly
    $groupsarr = explode(",", $newsgroups);
    foreach ($groupsarr as $newsgroup) {
        $cachefile = $spooldir . '/' . $newsgroup . '-cache.txt';
        @unlink($cachefile);
    }
    return $message;
}
?>