deb-mbse/mbsebbs/newuser.c

/*****************************************************************************
 *
 * $Id$
 * Purpose ...............: New User login under Unix, creates both
 *			    BBS and unix accounts.
 *
 *****************************************************************************
 * Copyright (C) 1997-2001
 *   
 * Michiel Broek		FIDO:		2:280/2802
 * Beekmansbos 10
 * 1971 BV IJmuiden
 * the Netherlands
 *
 * This file is part of MBSE BBS.
 *
 * This BBS is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License as published by the
 * Free Software Foundation; either version 2, or (at your option) any
 * later version.
 *
 * MBSE BBS is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * General Public License for more details.
 * 
 * You should have received a copy of the GNU General Public License
 * along with MBSE BBS; see the file COPYING.  If not, write to the Free
 * Software Foundation, 675 Mass Ave, Cambridge, MA 02139, USA.
 *****************************************************************************/

#include "../lib/libs.h"
#include "../lib/mbse.h"
#include "../lib/structs.h"
#include "../lib/records.h"
#include "../lib/clcomm.h"
#include "../lib/common.h"
#include "funcs.h"
#include "input.h"
#include "newuser.h"
#include "language.h"
#include "timeout.h"
#include "change.h"
#include "dispfile.h"


/*
 * Internal prototypes
 */
char *NameGen(char *);			    /* Get and test for unix login              */
char *NameCreate(char *, char *, char *);   /* Create users login in passwd file	*/
int  BadNames(char *);			    /* Check for Unwanted user names		*/
int  TelephoneScan(char *, char *);	    /* Scans for Duplicate User Phone Numbers   */


/*
 * Variables
 */
extern	int	do_quiet;		    /* No logging to the screen			*/
extern	pid_t	mypid;			    /* Pid of this program			*/
char		UnixName[9];		    /* Unix Name				*/
extern	char	*ieHandle;		    /* Users Handle				*/
extern  time_t  t_start;		    /* Program starttime			*/
int		do_mailout = FALSE;	    /* Just for linking				*/



/*
 * The main newuser registration function
 */
int newuser()
{
	FILE		*pUsrConfig;
	int		i, x, Found, iLang, recno = 0, Count = 0;
	unsigned long	crc;
	char		temp[PATH_MAX], *FullName;
	char		*temp1, *temp2;
	char		*Phone1, *Phone2;
	long		offset;
	struct userrec	us;
	int		badname;

	IsDoing("New user login");
	Syslog('+', "Newuser registration");
	clear();
	DisplayFile((char *)"newuser");
	if ((iLang = Chg_Language(TRUE)) == 0)
	    Fast_Bye(1);

	Enter(1);
	/* MBSE BBS - NEW USER REGISTRATION */
	language(CYAN, BLACK, 37);
	Enter(2);

	memset(&usrconfig, 0, sizeof(usrconfig));
	memset(&exitinfo, 0, sizeof(exitinfo));

	temp1  = calloc(81, sizeof(char));
	temp2  = calloc(81, sizeof(char));
	Phone1 = calloc(81, sizeof(char));
	Phone2 = calloc(81, sizeof(char));
	FullName = calloc(81, sizeof(char));

	usrconfig.iLanguage = iLang;
	usrconfig.FsMsged = TRUE;

	do {

	    /* Please enter your First and Last name: */
	    language(CYAN, BLACK, 0);
	    fflush(stdout);
	    alarm_on();
	    Getname(temp, 35);
	    strcpy(FullName, tlcap(temp));
	    Syslog('+', "Name entered: %s", FullName);
			
	    /*
	     * Secret escape name
	     */
	    if ((strcasecmp(temp, "off")) == 0) {
		Syslog('+', "Quick \"off\" logout");
		Fast_Bye(0);
	    }

	    Count++;
	    if (Count >= CFG.iCRLoginCount) {
		Enter(1);
		/* Disconnecting user ... */
		language(CFG.HiliteF, CFG.HiliteB, 2);
		Enter(2);
		Syslog('!', "Exceeded maximum login attempts");
		Fast_Bye(0);
	    }

	    /*
	     * Check name, duplicate names, unwanted names, single names, they all get
	     * the same errormessage.
	     */
	    badname = (BadNames(temp) || (CheckName(temp) || (strchr(temp, ' ') == NULL)));
	    if (badname) {
		language(LIGHTRED, BLACK, 386);
		Enter(1);
	    }

	} while (badname);

	strcpy(FullName, tlcap(temp));
	UserCity(mypid, FullName, (char *)"Unknown");

	while (TRUE) {
		Enter(1);
		/* Please enter new password   : */
		language(LIGHTCYAN, BLACK, 39);
		fflush(stdout);
		alarm_on();
	  	Getpass(temp1);
		if((x = strlen(temp1)) >= CFG.password_length) {
			Enter(1);
			/* Please enter password again : */
			language(LIGHTCYAN, BLACK, 40);
			fflush(stdout);
			alarm_on();
		  	Getpass(temp2);
			if((i = strcmp(temp1,temp2)) != 0) {
				Enter(2);
				/* Your passwords do not match! Try again. */
				language(LIGHTRED, BLACK, 41);
				Enter(1);
			} else {
				crc = StringCRC32(tu(temp1));
				break;
	  		}
	  	} else {
			Enter(2);
			/* Your password must contain at least */
			language(LIGHTRED, BLACK, 42);
	  		printf("%d ", CFG.password_length);
			/* characters! Try again. */
			language(WHITE, BLACK, 43);
			Enter(1);
		}
	}

	memset(&usrconfig.Password, 0, sizeof(usrconfig.Password));
	sprintf(usrconfig.Password, "%s", temp2);
	usrconfig.iPassword = crc;
	alarm_on();
	sprintf(UnixName, "%s", (char *) NameCreate(NameGen(FullName), FullName, temp2));

	strcpy(usrconfig.sUserName, FullName);
	strcpy(usrconfig.Name, UnixName);
	Time_Now = time(NULL);
	l_date = localtime(&Time_Now);
	ltime = time(NULL);

	if(CFG.iAnsi) {
		Enter(2);
		/* Do you want ANSI and graphics mode [Y/n]: */
		language(LIGHTGRAY, BLACK, 44);

		alarm_on();
 		i = toupper(getchar());

		if (i == Keystroke(44, 0) || i == '\n')
			usrconfig.GraphMode = TRUE;
		else
			usrconfig.GraphMode = FALSE;
	} else {
		usrconfig.GraphMode = TRUE; /* Default set it to ANSI */
		Enter(1);
	}
	exitinfo.GraphMode = usrconfig.GraphMode;
	TermInit(exitinfo.GraphMode);

	if (CFG.iVoicePhone) {
		while (1) {
			Enter(1);
			/* Please enter you Voice Number */
			language(LIGHTGREEN, BLACK, 45);
			Enter(1);

			pout(LIGHTGREEN, BLACK, (char *)": ");
			colour(CFG.InputColourF, CFG.InputColourB);
			fflush(stdout);
			alarm_on();
			GetPhone(temp, 16);

			if (strlen(temp) < 6) {
				Enter(1);
				/* Please enter a proper phone number */
				language(LIGHTRED, BLACK, 47);
				Enter(1);
			} else {
				strcpy(usrconfig.sVoicePhone, temp);
				strcpy(Phone1, temp);
				break;
			}
		}
	} /* End of first if statement */

	if (CFG.iDataPhone) {
		while (TRUE) {
			Enter(1);
			/* Please enter you Data Number */
			language(LIGHTGREEN, BLACK, 48);
			Enter(1);

			pout(LIGHTGREEN, BLACK, (char *)": ");
			colour(CFG.InputColourF, CFG.InputColourB);
			alarm_on();
			GetPhone(temp, 16);

			/*
			 * If no dataphone, copy voicephone.
			 */
			if (strcmp(temp, "") == 0) {
				strcpy(usrconfig.sDataPhone, usrconfig.sVoicePhone);
				break;
			}

			if( strlen(temp) < 6) {
				Enter(1);
				/* Please enter a proper phone number */
				language(LIGHTRED, BLACK, 47);
				Enter(1);
			} else {
				strcpy(usrconfig.sDataPhone, temp);
				strcpy(Phone2, temp);
				break;
			}
		}
	} /* End of if Statement */

	if(!CFG.iDataPhone)
		printf("\n");

	if (CFG.iLocation) {
		while (TRUE) {
			Enter(1);
			/* Enter your location */
			language(YELLOW, BLACK, 49);
			colour(CFG.InputColourF, CFG.InputColourB);
			alarm_on();
			if (CFG.iCapLocation) { /* Cap Location is turn on, Capitalise first letter */
				fflush(stdout);
				GetnameNE(temp, 24);
			} else
				GetstrC(temp, 80);
	
			if( strlen(temp) < CFG.CityLen) {
				Enter(1);
				/* Please enter a longer location */
				language(LIGHTRED, BLACK, 50);
				Enter(1);
				printf("%s%d)", (char *) Language(74), CFG.CityLen);
				Enter(1);
			} else {
				strcpy(usrconfig.sLocation, temp);
				UserCity(mypid, FullName, temp);
				break;
			}
		}
	}

	if (CFG.AskAddress) {
	    while (TRUE) {
		Enter(1);
		/* Your address, maximum 3 lines (only visible for the sysop): */
		language(LIGHTMAGENTA, BLACK, 474);
		Enter(1);
		for (i = 0; i < 3; i++) {
		    colour(YELLOW, BLACK);
		    printf("%d: ", i+1);
		    colour(CFG.InputColourF, CFG.InputColourB);
		    fflush(stdout);
		    alarm_on();
		    GetstrC(usrconfig.address[i], 40);
		}
		if (strlen(usrconfig.address[0]) || strlen(usrconfig.address[1]) || strlen(usrconfig.address[2]))
		    break;
		Enter(1);
		/* You need to enter your address here */
		language(LIGHTRED, BLACK, 475);
		Enter(1);
	    }
	}

	if (CFG.iHandle) {
		Enter(1);
		/* Enter a handle (Enter to Quit): */
		language(LIGHTRED, BLACK, 412);
		colour(CFG.InputColourF, CFG.InputColourB);
		fflush(stdout);
		alarm_on();
		Getname(temp, 34);

		if(strcmp(temp, "") == 0)
			strcpy(usrconfig.sHandle, "");
		else
			strcpy(usrconfig.sHandle, temp);
	}

	/*
	 * Note, the users database always contains the english sex
	 */
	if(CFG.iSex) {
		while (TRUE) {
			Enter(1);
			/* What is your sex? (M)ale or (F)emale: */
			language(LIGHTBLUE, BLACK, 51);
			colour(CFG.InputColourF, CFG.InputColourB);
			fflush(stdout);
			alarm_on();
		 	i = toupper(Getone());

			if (i == Keystroke(51, 0)) {
				/* Male */
				sprintf(usrconfig.sSex, "Male");
				pout(CFG.InputColourF, CFG.InputColourB, (char *) Language(52));
				Enter(1);
				break;
			} else
				if (i == Keystroke(51, 1)) {
					/* Female */
					sprintf(usrconfig.sSex, "Female");
					pout(CFG.InputColourF, CFG.InputColourB, (char *) Language(53));
					Enter(1);
					break;
				} else {
					Enter(2);
					/* Please answer M or F */
					language(LIGHTRED, BLACK, 54);
					Enter(1);
				}
		}
	} else /* End of if Statement */
		sprintf(usrconfig.sSex, "Unknown"); /* If set off, set to Unknown */

	while (TRUE) {
		Enter(1);
		/* Please enter your Date of Birth DD-MM-YYYY: */
		pout(CYAN, BLACK, (char *) Language(56));
		colour(CFG.InputColourF, CFG.InputColourB);
		fflush(stdout);
		alarm_on();
		GetDate(temp, 10);

		sprintf(temp1, "%c%c%c%c", temp[6], temp[7], temp[8], temp[9]);
		sprintf(temp2, "%02d", l_date->tm_year);
		iLang = atoi(temp2) + 1900;
		sprintf(temp2, "%04d", iLang);

		if ((strcmp(temp1,temp2)) == 0) {
			Enter(1);
			/* Sorry you entered this year by mistake. */
			pout(LIGHTRED, BLACK, (char *) Language(57));
			Enter(1);
		} else
			if((strlen(temp)) != 10) {
				Enter(1);
				/* Please enter the correct date format */
				pout(LIGHTRED, BLACK, (char *) Language(58));
				Enter(1);
			} else {
				strcpy(usrconfig.sDateOfBirth,temp);
				break;
			}
	}

	usrconfig.tFirstLoginDate = ltime; /* Set first login date to current date */
	usrconfig.tLastLoginDate = (time_t)0; /* To force setting new limits */
	strcpy(usrconfig.sExpiryDate,"00-00-0000");
	usrconfig.ExpirySec = CFG.newuser_access;
	usrconfig.Security = CFG.newuser_access;
	usrconfig.Email = CFG.GiveEmail;

	if (CFG.iHotkeys) {
		while (TRUE) {
			Enter(1);
			/* Would you like hot-keyed menus [Y/n]: */
			pout(LIGHTRED, BLACK, (char *) Language(62));
			colour(CFG.InputColourF, CFG.InputColourB);
			alarm_on();
		 	GetstrC(temp, 8);
	
			if ((toupper(temp[0]) == Keystroke(62, 0)) || (strcmp(temp,"") == 0)) {
				usrconfig.HotKeys = TRUE;
				break;
			}
			if (toupper(temp[0]) == Keystroke(62, 1)) {
				usrconfig.HotKeys = FALSE;
				break;
			} else {
				/* Please answer Y or N */
				pout(WHITE, BLACK, (char *) Language(63));
			}
		}
	} else
		usrconfig.HotKeys = TRUE; /* Default set it to Hotkeys */

	usrconfig.iTimeLeft    = 20;  /* Set Timeleft in users file to 20 */

	Enter(1);
	/* Please enter your Screen Length [24]: */
	pout(LIGHTMAGENTA, BLACK, (char *) Language(64));
	colour(CFG.InputColourF, CFG.InputColourB);
	fflush(stdout);
	alarm_on();
	Getnum(temp, 3);

	if(strlen(temp) == 0)
		usrconfig.iScreenLen = 24;
	else
		usrconfig.iScreenLen = atoi(temp);

	alarm_on();

	usrconfig.tLastPwdChange  = ltime; /* Days Since Last Password Change */
	usrconfig.iLastFileArea   = 1;
	usrconfig.iLastMsgArea    = 1;

	sprintf(usrconfig.sProtocol, "%s", (char *) Language(65));
	usrconfig.DoNotDisturb = FALSE;
	usrconfig.MailScan     = TRUE;
	usrconfig.ieFILE       = TRUE;
	usrconfig.ieNEWS       = TRUE;
	usrconfig.Cls          = TRUE;
	usrconfig.More         = TRUE;
	usrconfig.ieASCII8     = TRUE;

	/*
	 * Search a free slot in the users datafile
	 */
	sprintf(temp, "%s/etc/users.data", getenv("MBSE_ROOT"));
	if ((pUsrConfig = fopen(temp, "r+")) == NULL) {
		WriteError("Can't open file: %s", temp);
		ExitClient(1);
	}

	fread(&usrconfighdr, sizeof(usrconfighdr), 1, pUsrConfig);
	offset = ftell(pUsrConfig);
	Found = FALSE;

	while ((fread(&us, usrconfighdr.recsize, 1, pUsrConfig) == 1) && (!Found)) {
		if (us.sUserName[0] == '\0') {
			Found = TRUE;
		} else {
			offset = ftell(pUsrConfig);
			recno++;
		}
	}
	
	if (Found)
		fseek(pUsrConfig, offset, SEEK_SET);
	else
		fseek(pUsrConfig, 0, SEEK_END);

	fwrite(&usrconfig, sizeof(usrconfig), 1, pUsrConfig);
	fclose(pUsrConfig);

	Enter(2);
	/* Your user account has been created: */
	pout(YELLOW, BLACK, (char *) Language(67));
	Enter(2);

	/* Login Name : */
	pout(LIGHTBLUE, BLACK, (char *) Language(68));
	colour(CYAN, BLACK);
	printf("%s (%s)\n", UnixName, FullName);
	/* Password   : */
	pout(LIGHTBLUE, BLACK, (char *) Language(69));
	pout(CYAN, BLACK, (char *)"<");
	/* not displayed */
	pout(WHITE, BLACK, (char *) Language(70));
	pout(CYAN, BLACK, (char *)">\n\n");
	fflush(stdout);
	fflush(stdin);
 
	if(CFG.iVoicePhone) {
	  	if(TelephoneScan(Phone1, FullName))
	  		Syslog('!', "Duplicate phone numbers found");
  	}

	if(CFG.iDataPhone) {
		if(TelephoneScan(Phone2, FullName))
			Syslog('!', "Duplicate phone numbers found");
	}
 
	free(temp1);
	free(temp2);
	free(Phone1);
	free(Phone2);

	DisplayFile((char *)"registered");

	Syslog('+', "Completed new-user procedure");
	/* New user registration completed. */
	pout(LIGHTGREEN, BLACK, (char *) Language(71));
	Enter(1);
	/* You need to login again with the name: */
	pout(LIGHTRED, BLACK, (char *) Language(5));
	pout(YELLOW, BLACK, UnixName);
	Enter(2);
	alarm_on();
	Pause();
	alarm_off();
	printf("\n");
	return 0;
}



void Fast_Bye(int onsig)
{
        char    *temp;
	time_t	t_end;

        time(&t_end);
        Syslog(' ', "MBNEWUSR finished in %s", t_elapsed(t_start, t_end));
        socket_shutdown(mypid);
	
	temp = calloc(PATH_MAX, sizeof(char));
        sprintf(temp, "%s/tmp/mbsebbs%d", getenv("MBSE_ROOT"), getpid());
        unlink(temp);
        free(temp);

        colour(7, 0);
        fflush(stdout);
        fflush(stdin);
        sleep(3);

        Free_Language();
        free(pTTY);
#ifdef MEMWATCH
        mwTerm();
#endif
        exit(0);
}



/*
 * This function is the same as Fast_Bye(), it's here
 * to link the other modules properly.
 */
void Good_Bye(int onsig)
{
    Fast_Bye(onsig);
}



/*
 * Function will ask user to create a unix login
 * Name cannot be longer than 8 characters
 */
char *NameGen(char *FidoName)
{
        char            *sUserName;
        struct passwd   *pw;

        sUserName = calloc(10, sizeof(char));

        Syslog('+', "NameGen(%s)", FidoName);
        setpwent();
        while ((strcmp(sUserName, "") == 0 || (pw = getpwnam(sUserName)) != NULL) || (strlen(sUserName) < 3)) {
                colour(12, 0);
                printf("\n%s\n\n", (char *) Language(381));
                colour(15, 0);
                /* Please enter a login name (Maximum 8 characters) */
                printf("\n%s\n", (char *) Language(383));
                /* ie. John Doe, login = jdoe */
                printf("%s\n", (char *) Language(384));
                colour(10, 0);
                /* login > */
                printf("%s", (char *) Language(385));
                fflush(stdout);
                fflush(stdin);
                GetstrU(sUserName, 7);

                setpwent();
                if (pw = getpwnam(tl(sUserName)), pw != NULL) {
                        /* That login name already exists, please choose another one. */
                        colour(12, 0);
                        printf("\n%s\n", (char *) Language(386));
                        setpwent();
                }
        }
        return tl(sUserName);
}


/*
 * Function will create the users name in the passwd file
 */
char *NameCreate(char *Name, char *Comment, char *Password)
{
        char    *PassEnt;

        PassEnt = calloc(256, sizeof(char));

        /*
         * Call mbuseradd, this is a special setuid root program to create
         * unix acounts and home directories.
         */
        sprintf(PassEnt, "%s/bin/mbuseradd %d %s \"%s\" %s",
                getenv("MBSE_ROOT"), getgid(), Name, Comment, CFG.bbs_usersdir);
        Syslog('+', "%s", PassEnt);
        fflush(stdout);
        fflush(stdin);

        if (system(PassEnt) != 0) {
                WriteError("Failed to create unix account");
                free(PassEnt);
                ExitClient(1);
        }
        sprintf(PassEnt, "%s/bin/mbpasswd -f %s %s", getenv("MBSE_ROOT"), Name, Password);
        Syslog('+', "%s/bin/mbpasswd -f %s ******", getenv("MBSE_ROOT"), Name);
        if (system(PassEnt) != 0) {
                WriteError("Failed to set unix password");
                free(PassEnt);
                ExitClient(1);
        }

        colour(14, 0);
        /* Your "Unix Account" is created, you may use it the next time you call */
        printf("\n%s\n", (char *) Language(382));
        Syslog('+', "Created Unix account %s for %s", Name, Comment);

        free(PassEnt);
        return Name;
}



/*
 * Function will check for unwanted user names
 */
int BadNames(char *Username)
{
        FILE    *fp;
        short   iFoundName = FALSE;
        char    *temp, *String, *User;

        temp   = calloc(PATH_MAX, sizeof(char));
        String = calloc(81, sizeof(char));
        User   = calloc(81, sizeof(char));

        strcpy(User, tl(Username));

        sprintf(temp, "%s/etc/badnames.ctl", getenv("MBSE_ROOT"));
        if(( fp = fopen(temp, "r")) != NULL) {
                while((fgets(String, 80, fp)) != NULL) {
                        strcpy(String, tl(String));
                        Striplf(String);
                        if((strstr(User, String)) != NULL) {
                                printf("\nSorry that name is not acceptable on this system\n");
                                iFoundName = TRUE;
                                break;
                        }
                }
                fclose(fp);
        }

        free(temp);
        free(String);
        free(User);
        return iFoundName;
}



/*
 * Function will Scan Users Database for existing phone numbers. If
 * found, it will write a log entry to the logfile. The user WILL NOT
 * be notified about the same numbers
 */
int TelephoneScan(char *Number, char *Name)
{
        FILE    *fp;
        int     Status = FALSE;
        char    *temp;
        struct  userhdr uhdr;
        struct  userrec u;

        temp  = calloc(81, sizeof(char));

        sprintf(temp, "%s/etc/users.data", getenv("MBSE_ROOT"));
        if(( fp = fopen(temp,"rb")) != NULL) {
                fread(&uhdr, sizeof(uhdr), 1, fp);

                while (fread(&u, uhdr.recsize, 1, fp) == 1) {
                        if (strcasecmp(u.sUserName, Name) != 0)
                                if ((strlen(u.sVoicePhone) && (strcmp(u.sVoicePhone, Number) == 0)) ||
                                    (strlen(u.sDataPhone) &&  (strcmp(u.sDataPhone, Number) == 0))) {
                                        Status = TRUE;
                                        Syslog('b', "Dupe phones ref: \"%s\" voice: \"%s\" data: \"%s\"",
                                                Number, u.sVoicePhone, u.sDataPhone);
                                        Syslog('+', "Uses the same telephone number as %s", u.sUserName);
                                }
                }
                fclose(fp);
        }

        free(temp);
        return Status;
}