sqwebmail/token.c


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57

/*
** Copyright 1998 - 1999 Double Precision, Inc.  See COPYING for
** distribution information.
*/


/*
*/
#include	"sqwebmail.h"
#include	"config.h"
#include	"token.h"
#include	"sqconfig.h"
#include	"cgi/cgi.h"
#include	<stdio.h>
#include	<string.h>
#if	HAVE_UNISTD_H
#include	<unistd.h>
#endif
#include	<time.h>
#if HAVE_SYS_TIME_H
#include	<sys/time.h>
#endif

void tokennew()
{
time_t	t;

	time(&t);
	printf("<input type=\"hidden\" name=\"msgtoken\" value=\"%ld-%ld\" />",
		(long)t, (long)getpid());
}

void tokennewget()
{
time_t	t;

	time(&t);
	printf("&amp;msgtoken=%ld-%ld", (long)t, (long)getpid());
}

int tokencheck()
{
const char *token=cgi("msgtoken");
const char *savedtoken;

	if (!token || token[0] == '\0')
		return(0);
	savedtoken=read_sqconfig(".", TOKENFILE, 0);
	if (savedtoken && strcmp(token, savedtoken) == 0)
		return (-1);
	return (0);
}

void tokensave()
{
	write_sqconfig(".", TOKENFILE, cgi("msgtoken"));
}