Subj : docs/dropfile_ini.md
To   : Git commit to main/sbbs/master
From : Rob Swindell (on Debian Linux)
Date : Wed Sep 30 2026 20:48:07

https://gitlab.synchro.net/main/sbbs/-/commit/ab8af28788a4540a7bad0a68
Modified Files:
	docs/dropfile_ini.md
Log Message:
docs: DROPFILE.INI draft 0.5

Incorporate NuSkooler's review of draft 0.3 (FSX BBS, 2026-09-30):

- U+2028/U+2029 and the bidirectional format characters count as control
  characters, closing a key-injection hole in readers that split on them
- USER_KEY starts with a letter or digit; doors prefix or hash it before
  using it in a path, so a device name or ".." can't reach the file system
- Security: the file is only as trustworthy as whoever can write it; the
  host should make it writable only by itself; personal details should be
  a per-door sysop choice
- Hosts keep other sessions' handles out of the door (handle list on
  Windows, close-on-exec on POSIX)
- Unknown token values read as the key's default, never a more privileged
  one; LF-splitting readers strip the trailing CR
- New TERM_TERMINFO key for the Telnet/SSH/RLogin terminal type name;
  TERM_NAME names its source
- Screen size is a snapshot; a door that cares re-queries the terminal
- SYS_FTN_ADDR lists every address, primary first, with optional @domain
- New path type: file system bytes, never converted or cut; non-text
  values that don't fit are left out rather than cut
- TERM_TYPE gains avatar, for converters from DORINFO1.DEF
- FILE_CHARSET and ATASCII declined for now; SESSION_ID, connect-back
  doors, test files and message editor keys recorded as open questions

Looking the file up by name in a directory is allowed but discouraged:
the door is always given the full path, and a door that looks by name
must ignore case.

Add a coverage audit against the older drop files (DOOR.SYS, DOOR32.SYS,
DORINFO1.DEF, CHAIN.TXT, CALLINFO.BBS, SFDOORS.DAT, TRIBBS.SYS,
PCBOARD.SYS, DOORFILE.SR, BBSDEV.DRP, XTRN.DAT, Phenom Dropfile and
DTS-0001), listing each field with no key and why, with proposals for
the real gaps (phone, logons, last call, transfer totals, time used).

Fix the DOOR.SYS citation: DTS-0001 is not DOOR.SYS but a 1992 proposal
for a named-value DROPFILE.###, now cited as prior art; DOOR.SYS cites
the Synchronet wiki page.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
--- SBBSecho 3.38-Linux
 * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

.