X-Git-Url: https://git.distorted.org.uk/~mdw/ezmlm/blobdiff_plain/5b62e993b0af39700031c2875d7f6654e6a02850..f8beb284087c279acfb30506f5bb32baa4949b44:/sub_mysql/checktag.c

diff --git a/sub_mysql/checktag.c b/sub_mysql/checktag.c
new file mode 100644
index 0000000..05de3ce
--- /dev/null
+++ b/sub_mysql/checktag.c
@@ -0,0 +1,104 @@
+/*$Id: checktag.c,v 1.11 1999/11/10 04:08:27 lindberg Exp $*/
+/*$Name: ezmlm-idx-040 $*/
+#include "stralloc.h"
+#include "scan.h"
+#include "fmt.h"
+#include "cookie.h"
+#include "makehash.h"
+#include "strerr.h"
+#include "errtxt.h"
+#include "subscribe.h"
+#include <mysql.h>
+
+static stralloc key = {0};
+static stralloc line = {0};
+static stralloc quoted = {0};
+static char strnum[FMT_ULONG];
+static char newcookie[COOKIE];
+
+char *checktag (dir,num,listno,action,seed,hash)
+/* reads dir/sql. If not present, returns success (NULL). If dir/sql is    */
+/* present, checks hash against the cookie table. If match, returns success*/
+/* (NULL), else returns "". If error, returns error string. */
+
+char *dir;				/* the db base dir */
+unsigned long num;			/* message number */
+unsigned long listno;			/* bottom of range => slave */
+char *action;
+char *seed;				/* cookie base */
+char *hash;				/* cookie */
+{
+  MYSQL_RES *result;
+  MYSQL_ROW row;
+  char *table = (char *) 0;
+  char *r;
+
+  if ((r = opensql(dir,&table))) {
+    if (*r) return r;
+    if (!seed) return (char *) 0;		/* no data - accept */
+
+    strnum[fmt_ulong(strnum,num)] = '\0';	/* message nr ->string*/
+
+    switch(slurp("key",&key,32)) {
+      case -1:
+	return ERR_READ_KEY;
+      case 0:
+	return ERR_NOEXIST_KEY;
+    }
+
+    cookie(newcookie,key.s,key.len,strnum,seed,action);
+    if (byte_diff(hash,COOKIE,newcookie)) return "";
+    else return (char *) 0;
+
+  } else {
+
+/* SELECT msgnum FROM table_cookie WHERE msgnum=num and cookie='hash' */
+/* succeeds only is everything correct. 'hash' is quoted since it is  */
+/*  potentially hostile. */
+    if (listno) {			/* only for slaves */
+      if (!stralloc_copys(&line,"SELECT listno FROM ")) return ERR_NOMEM;
+      if (!stralloc_cats(&line,table)) return ERR_NOMEM;
+      if (!stralloc_cats(&line,"_mlog WHERE listno=")) return ERR_NOMEM;
+      if (!stralloc_catb(&line,strnum,fmt_ulong(strnum,listno)))
+	return ERR_NOMEM;
+      if (!stralloc_cats(&line," AND msgnum=")) return ERR_NOMEM;
+      if (!stralloc_catb(&line,strnum,fmt_ulong(strnum,num))) return ERR_NOMEM;
+      if (!stralloc_cats(&line," AND done > 3")) return ERR_NOMEM;
+      if (mysql_real_query((MYSQL *) psql,line.s,line.len) != 0)
+	return mysql_error((MYSQL *) psql);			/* query */
+      if (!(result = mysql_use_result((MYSQL *) psql)))		/* use result */
+	return mysql_error((MYSQL *) psql);
+      if ((row = mysql_fetch_row(result)))
+	return "";					/*already done */
+      else						/* no result */
+        if (!mysql_eof(result))
+	  return mysql_error((MYSQL *) psql);
+      mysql_free_result(result);			/* free res */
+    }
+
+    if (!stralloc_copys(&line,"SELECT msgnum FROM ")) return ERR_NOMEM;
+    if (!stralloc_cats(&line,table)) return ERR_NOMEM;
+    if (!stralloc_cats(&line,"_cookie WHERE msgnum=")) return ERR_NOMEM;
+    if (!stralloc_catb(&line,strnum,fmt_ulong(strnum,num))) return ERR_NOMEM;
+    if (!stralloc_cats(&line," and cookie='")) return ERR_NOMEM;
+    if (!stralloc_ready(&quoted,COOKIE * 2 + 1)) return ERR_NOMEM;
+    quoted.len = mysql_escape_string(quoted.s,hash,COOKIE);
+    if (!stralloc_cat(&line,&quoted)) return ERR_NOMEM;
+    if (!stralloc_cats(&line,"'")) return ERR_NOMEM;
+
+    if (mysql_real_query((MYSQL *) psql,line.s,line.len) != 0)	/* select */
+	return mysql_error((MYSQL *) psql);
+    if (!(result = mysql_use_result((MYSQL *) psql)))
+	return mysql_error((MYSQL *) psql);
+    if (!mysql_fetch_row(result)) {
+    if (!mysql_eof(result))		/* some error occurred */
+	return mysql_error((MYSQL *) psql);
+      mysql_free_result(result);	/* eof => query ok, but null result*/
+      return "";			/* not parent => perm error */
+    }
+    mysql_free_result(result);		/* success! cookie matches */
+    if (listno)
+      (void) logmsg(dir,num,listno,0L,3);	/* non-ess mysql logging */
+    return (char *)0;
+  }
+}