*before* calling _beginthread().
The active_clients is exactly perfect here either (since it's incrementing in
the ctrl_thread), todo later, but shouldn't cause a crash like the above issue.

I've likely broken something though, so if you see weird behaviour with
extended ASCII, let me know please.

active_clients (protected integer) could be 0 at the time of recycle because
there can be delay at the beginning of the FTP ctrl thread (e.g. looking up
filtered IPs/hostnames) before the active_clients is incremented which could
be during/after it was destroyed by the cleanup() function. Now tracking
number of threads using protected integer which increments immediately upon
child thread creation and is not destroyed until the main thread terminates.
There is currently *not* timeout while waiting for child threads to terminate
upon shutdown/recycle, so this could result in a hung server thread if a child
thread is indefinitely hung - consider using a timeout.

Per RFC3659, the correct response for "Good command, but no size for you" is
550, not 500 or 501 (these indicate an inability to parse the command).

This works with Chrome.

This is *likely* to break the Win32 build and even when the macros are
specified in xpdev, I doubt Microsoft has added support for the 'z' size
specifier used in smblib/smbadd.c we'll likely need a SIZE_T_SIZE macro
that is "z" on C99 systems and "ll" or "64" or whatever it is on Win32.

Or maybe a whole slew of complete SIZE_T macros since the 32/64 but thing
and the max file size thing may actually need the full format specification
to be in the macro... "zu" on C99 platforms and whatever magic Microsoft
needs there.

and leave it rooted until the script is done or the context is destroyed.

This should clean up crashes before a script starts (ie: While creating
common objects)

has its own functional "too much recursion" detection.
Replaced "branch callback" stuff with "operational callback".
JavaScriptBranchLimit has been replaced with JavaScriptTimeLimit
(default value: 24 hours)

all exported functions and data types using a 32-bit time_t (time32_t).

Only js_ValueToStringBytes() still leaks.

(Everything still broken)

      on the floor of Deuce's computer room
Cyan: Rob's on his way
* Deuce throws his coffee on it.

Converted active client counter to a protected (thread-safe) integer.

The attempt list can be view with sbbscon->'a' command or sbbsctrl->view->Login
Attempt List...
Delay/throttle/hacklog/and auto-filter values/thresholds are now configurable
in sbbs.ini.

recent), and automatically filter IPs of obvious hackers
(100 consecutive unique failed login attempts).

from the same host (but not necessarily the same connection).
No login retry is allowed for suspected hackers (one authentication attempt per
connection).
New-connections from suspected hack hosts are now delayed increasingly with
the number of failed login attempts.

from the same host (but not necessarily the same connection).
No login retry is allowed for suspected hackers (one authentication attempt per
connection).
Other FTP hack.log entries contain a little more detail about the type of
suspected hack attempt (e.g. "FTP BOUNCE").

of configured upload requirements) and exceed the "max files" settings per dir.

commonly modified by multiple threads, potentially simultaneously, resulting in
bad values (e.g. active_clients = -1).
Updated copyright date to 2011.
Fixed Win32 compile bug in main.cpp introduced in last commit.
Eliminated some unused variables and updated some times (e.g. ulong in place
fo uint32_t).

warning C4018: '!=' : signed/unsigned mismatch

ftp://yourbbs.com/00index.txt (or .html) - implemented EPSV (and EPRT) commands
and SIZE command no longer fails with error 500 on dynamic files (reports size
of 0 bytes instead).

Fixes crashes with 64-bit off_t in ftpsrvr.c

(potentially) non-blank for external JS modules configured in SCFG->External
Programs, as well as those executed from jsexec. If the startup_dir is
specified in SCFG and no path is given for the .js file, it will look in the
startup_dir first. js.startup_dir will be an empty string for all other cases
(currently).