26 files changed, 12499 insertions, 0 deletions

diff --git a/src/.sledjChisl.conf.lua b/src/.sledjChisl.conf.lua
new file mode 100644
index 0000000..6b8f29b
--- /dev/null
+++ b/src/.sledjChisl.conf.lua
@@ -0,0 +1,58 @@
+-- sledjChislConfig.lua
+
+-- This works coz LuaJIT automatically loads the jit module.
+if type(jit) == 'table' then
+  io.write('.sledjChisl.conf.lua is being run by ' .. jit.version .. ' under ' .. jit.os .. ' on a ' .. jit.arch .. '\n')
+else
+  io.write('.sledjChisl.conf.lua is being run by Lua version ' .. _VERSION .. '\n')
+end
+
+config =
+{
+  ["performance"]       = "default";            -- fast, balanced, default, lean
+  ["debug"]             = true;
+  ["scRoot"]            = "/opt/opensim_SC";
+  ["scUser"]            = "opensimsc";
+  ["Tconsole"]          = "SledjChisl";
+  ["Tsocket"]           = "opensim-tmux.socket";
+  ["Ttab"]              = "SC";
+  ["loadAverageInc"]    = 0.7;
+  ["simTimeOut"]        = 45;                   -- seconds
+  ["webRoot"]           = "/var/www/html";
+  ["webHost"]           = "localhost";
+  ["URL"]               = "sledjchisl.fcgi";
+  ["webIframers"]       = "";                   -- Space separated list of hosts allowed to iFrame us, coz someone asked.  Include the "https://" bit.
+  ["seshRenew"]         = 10 * 60;              -- seconds
+  ["idleTimeOut"]       = 30 * 60;              -- seconds
+  ["seshTimeOut"]       = 24 * 60 * 60;         -- seconds
+  ["newbieTimeOut"]     = 30;                   -- days
+  ["pepper"]            = "My long beard is salt and pepper coloured, though there are no birds in it, only breakfast.";
+  ["ToS"]               = [[
+
+Don't do anything that is illegal anywhere in the world.
+
+Well, that wont work, almost everything is illegal somewhere in the
+world.
+
+Don't do anything that is against the moral code of the system admins.
+
+Well, except that one thing, you know, that they'll put up with coz they
+are nice people, but it's wrong m'kay.
+
+Don't be mean to anyone, except Dave, coz he smells evil.
+
+Well, it's not that Dave smells evil, he's just differently fragranced,
+and our overwashed germophobe society is well trained to demonize those
+that smell differently.  So be extra nice to Dave, coz he's a great guy,
+and is tired of everyone being mean to him just coz he's trying to be
+good for the environment and his health.  Which means he smells different
+to whatever perfume is fashionable this year, coz the corporations want
+to sell that this year.  I blame marketing, they're actually evil. 
+Sorry, went off on a rant there.
+
+Oh just respect and be nice to everyone dammit, unless they ask nicely
+otherwise.  Also be good for the environment and stay healthy.
+
+]];
+}
+return config
diff --git a/src/BuildIt.sh b/src/BuildIt.sh
new file mode 100755
index 0000000..6696210
--- /dev/null
+++ b/src/BuildIt.sh
@@ -0,0 +1,132 @@
+#!/bin/bash
+
+mkdir -p build
+
+# Poor mans git sub modules / subtrees, coz otherwise it gets complex.
+if [ ! -d git-sub-modules/fcgi2 ]; then
+    pushd git-sub-modules >/dev/null
+    git clone https://github.com/FastCGI-Archives/fcgi2.git
+    popd >/dev/null
+else
+    pushd git-sub-modules/fcgi2 >/dev/null
+    echo "Updating fcgi2."
+#    git pull | grep "Already up-to-date." && rm -fr build/fcgi2
+    popd >/dev/null
+fi
+
+if [ ! -d build/fcgi2 ]; then
+    cp -r  git-sub-modules/fcgi2 build/
+    pushd build/fcgi2 >/dev/null
+#    make distclean
+    ./autogen.sh
+    ./configure
+    sed -e "s/#define PACKAGE/#define FCGI_PACKAGE/g" -i fcgi_config.h
+    sed -e "s/#define VERSION /#define FCGI_VERSION /g" -i fcgi_config.h
+    make
+    popd >/dev/null
+fi
+
+echo ""
+echo ""
+
+if [ ! -d git-sub-modules/luajit ]; then
+    pushd git-sub-modules >/dev/null
+    git clone https://luajit.org/git/luajit-2.0.git
+    mv luajit-2.0 luajit
+    pushd luajit >/dev/null
+        git checkout v2.1
+    popd >/dev/null
+    popd >/dev/null
+else
+    pushd git-sub-modules/luajit >/dev/null
+    echo "Updating LuaJIT."
+#    git pull | grep "Already up-to-date." && rm -fr build/luajit
+    popd >/dev/null
+fi
+
+if [ ! -d build/luajit ]; then
+    rm -fr build/luajit
+    cp -r  git-sub-modules/luajit build/
+
+    pushd build/luajit >/dev/null
+    make clean
+    make amalg
+    popd >/dev/null
+fi
+
+echo ""
+echo ""
+
+if [ ! -d git-sub-modules/qlibc ]; then
+    pushd git-sub-modules >/dev/null
+    git clone https://github.com/wolkykim/qlibc.git
+    popd >/dev/null
+else
+    pushd git-sub-modules/qlibc >/dev/null
+    echo "Updating qlibc."
+#    git pull | grep "Already up-to-date." && rm -fr build/qlibc
+    popd >/dev/null
+fi
+
+if [ ! -d build/qlibc ]; then
+    rm -fr build/qlibc
+    cp -r  git-sub-modules/qlibc build/
+
+    pushd build/qlibc >/dev/null
+    make clean
+    ./configure
+    make
+    popd >/dev/null
+fi
+
+echo ""
+echo ""
+
+if [ ! -d git-sub-modules/toybox ]; then
+    pushd git-sub-modules >/dev/null
+    git clone https://github.com/landley/toybox.git
+    popd >/dev/null
+else
+    pushd git-sub-modules/toybox >/dev/null
+    echo "Updating toybox."
+#    git pull | grep "Already up-to-date." && rm -fr build/toybox
+    popd >/dev/null
+fi
+
+if [ ! -d build/toybox ]; then
+    rm -fr build/toybox
+    cp -r  git-sub-modules/toybox               build/
+    ln -fs ../../../boxes                       build/toybox/toys/boxes
+    ln -fs ../../../sledjchisl          build/toybox/toys/sledjchisl
+    ln -fs ../toys/sledjchisl/fcgi_SC.c build/toybox/lib
+    ln -fs ../toys/sledjchisl/fcgi_SC.h build/toybox/lib
+    ln -fs ../toys/boxes/handlekeys.c   build/toybox/lib
+    ln -fs ../toys/boxes/handlekeys.h   build/toybox/lib
+
+    pushd build/toybox >/dev/null
+    sed -e "s/strend(/tb_strend(/g" -i lib/lib.h
+    find ./ -type f -name "*.c" -exec sed -e "s/strend(/tb_strend(/g" -i {} \;
+    make clean
+    #make defconfig
+    #make menuconfig
+    make allnoconfig KCONFIG_ALLCONFIG=../../miniconfig || exit 1
+    popd >/dev/null
+fi
+
+echo ""
+echo ""
+
+pushd build/toybox >/dev/null
+export  CFLAGS="-I../luajit/src -I../fcgi2 -I../fcgi2/include -I../qlibc/include/qlibc   $(mysql_config --cflags) -g3"
+export LDFLAGS="-L../luajit/src -L../fcgi2/libfcgi/.libs      -L../qlibc/lib             $(mysql_config --libs) -Wl,-E -l:libluajit.a -l:libqlibcext.a -l:libfcgi.a -l:libqlibc.a -lcrypto -luuid"
+make  || exit 1
+popd >/dev/null
+ln -fs ../src/build/toybox/toybox ../bin/sledjchisl
+
+#sudo rm -f /opt/opensim_SC/var/cache/sledjchisl.socket
+#sudo rm -f /opt/opensim_SC/var/cache/sessions/*
+#sudo rm -f /opt/opensim_SC/var/lib/users/*
+#sudo spawn-fcgi -n -u opensimsc -s /opt/opensim_SC/var/cache/sledjchisl.socket -M 0660 -G www-data  -- /usr/bin/valgrind --leak-check=full build/toybox/generated/unstripped/toybox sledjchisl
+##sudo spawn-fcgi -n -u opensimsc -s /opt/opensim_SC/var/cache/sledjchisl.socket -M 0660 -G www-data  -- /usr/bin/valgrind --leak-check=full build/toybox/generated/unstripped/toybox sledjchisl 2>&1 | tee log.txt
+##sudo spawn-fcgi -n -u opensimsc -s /opt/opensim_SC/var/cache/sledjchisl.socket -M 0660 -G www-data  -- /usr/bin/valgrind --leak-check=full --show-leak-kinds=all build/toybox/generated/unstripped/toybox sledjchisl
+###sudo spawn-fcgi -n -u opensimsc -s /opt/opensim_SC/var/cache/sledjchisl.socket -M 0660 -G www-data  -- /usr/bin/ddd build/toybox/generated/unstripped/toybox sledjchisl
diff --git a/src/boxes/BOXES.txt b/src/boxes/BOXES.txt
new file mode 100644
index 0000000..745b7c9
--- /dev/null
+++ b/src/boxes/BOXES.txt
@@ -0,0 +1,1130 @@
+What's needed for MC like program.  Call the library toyboxes, and the MC clone toysoldier.  B-)
+
+Use ANSI for terminal control.
+UTF-8 support is welcome in toybox where it makes sense, here it makes sense.
+
+Command defining - key, name, script, context.
+    Internal commands for the scripts.
+        Which can depend on the context.
+    Context is important.  Gotta handle stuff like vi modes, MC browse / view / edit modes, less search popping into readline mode, etc.
+    Learnable keys ala GIMP.
+
+Split the screen up into boxes.
+    Each box is a context.
+    Current box should have it's box graphics drawn in a different colour to highlight it.
+    Tab/shift-Tab cycles through boxes.
+        Though the editor has it's own use for tab.  Ctrl-tab as an alias perhaps?
+    Horizontal / vertical splits, with some sort of size control.
+        Each box can be split h or v once, 
+        with a control of what proportion the current box has (initially half),
+        a minimum size set by the contents,
+        and initially a copy of the pointer to the function that supplies it's contents / deals with it's input / includes it's context.
+        Later it can have that pointer set to something else.
+        Any given box can be deleted, which deletes it's sub boxes, drops it's pointer, and merges it's area with the one it split from.
+    See if screen and tmux agree on keys to use for box control.
+        Though, as usual, it's definable, but screen/tmux can be the defaults.
+    Choose to make a box full screen.  With menu to select other boxes, or swap back to full set of boxes.
+        Can be without borders and such.
+
+    The borders can be the usual box graphics, +-| characters, or inverse spaces, in that order of priority.
+    Show bits of text on top and bottom borders (left and right sides of them).
+        MC includes a couple of tiny mouse controlled widgets.
+    Perhaps a scroll widget in left or right borders.  Emacs dired has that.
+
+    Single line 'boxes', across the entire terminal, or across each box.
+        Should be context sensitive.
+        Menu - a list of commands showing their names and keys, with sub menus.
+        Function keys - Any function keys with commands showing the command names and key.
+            Perhaps could just be a specialized menu.
+        Programmable status line.
+
+    Contents scrolling.
+        Virtual memory buffers.
+            If a file viewer, just mmap it.
+            Editor should be able to only load in bits of a large file, perhaps with a UNDO/REDO buffer.
+            If command output, can create a temp file and mmap it.
+
+    file viewer (less, man).
+    editor (vi, mcedit, nano).
+        Like e3, make generic editor, with pluggable command keys, that kick in depending on how it's called.
+            Uses a file list in a box to select files for opening.
+    Poor mans top and similar commands.
+        Top at least could make use of internal boxes, with the command list using a sortable list.
+    Put command output in boxes.  Each line can be selected and operated on.
+        Title bar across top, with click to sort style column names.
+        Each line is a single line 'box'.
+        ls.
+        ls with display options.
+        archive listing
+        find command result.
+            All these can show current directory with diving in and out, or tree and current directory in a sub box.
+            Also, allow an edit mode for editing the file attributes that are displayed, inline and full box if possible.
+    Shell console, with various text substitutions on input.
+        Can be a single line 'box' as well as an ordinary box.
+        Though the ordinary ones show their output in their box,
+        but the single line one should swap to a full screen, which can be a full screen box.
+
+A box has content.  Each content type is a context.  So we can have -
+    Plain scrollable text view.
+    Fancy text view (hex and so on).
+    Text edit.
+    Directory browse.
+    Script controlled.
+
+Popup widgets centered on box/boxes that they affect.
+    Labels, Text line (with optional history), check boxes, radio buttons, OK/Cancel/etc buttons, popup select list (useful for history to, can be just a menu specilization).
+    Widget sets, though try to keep things simple enough to not need them.
+    Notifications, with the addition of an abort button.
+    If a single widget in the popup, prompt in a single line "box" near the bottom (like nano).
+    Options.
+        Keep options down to a bare minimum.
+    Command params.
+        Fetch command params from internal toybox structures, map them to the appropriate widget.
+    F2 menu - list of commands to apply to file/s or current directory.
+        The list is selectable by file type.
+        Should use the same code as the menu box, and allow sub menus.
+    Context sensitive history lists for selecting stuff.
+        Could also be a widget inside the popup when needed.
+    Search / replace.
+    Delete / save confirmation.
+    Command progress meter.
+        Use xargs, and have it output something useful per 'argument' for the progress meter.
+            xargs has an option to print the command to stdout, and to ask for confirmation per command.
+            xargs can run multiple threads.
+
+Scripting, so we can make things fancy and tie it together.
+    Don't forget to make it 'scriptable' via internal C.
+    MC uses that for the F2 menu, user menu, and archive access.
+    We should use scripts to define most of the above.
+    I'd like to use Lua, but shell is likely a better choice.
+        Coz toybox will have a shell.
+        And MC scripts are mostly shell bits.
+    Should have an actual toyboxes command that you can feed toyboxes scripts into.
+        Might actually get away with using that to define most of MC, AND be the editor plugins.
+        See how far I get, but that's what I'll start with for testing.
+        I should reuse the old emu protocol for this.
+    Not gonna actually sort function names or key combos.
+        A linear search is good enough for keys, they only come in at human speeds.
+        People might want the scripts to run faster, but in toybox we strive for simplicity.
+        Well, maybe a binary search within each modules function block that is sorted by hand in the source code.
+        On the other hand, might be able to make use of the toybox command parsing infrastructure for script functions.
+            Leaving that as a problem for toybox itself.
+            But it's not reusable, it uses globals, and not sure if we can screw with those globals.
+
+NOTE - toybox is designed to only deal with one command per process.  So we can't call other toybox commands internally.
+        Or can we?  Toysh does it.
+
+Events
+    We need a time event.  Top has a resolution of hundredths of a second, though says that only tenths is officially supported.
+        Tenths makes sense for human speed UI.  Hundredths makes sense if you want video frame rates.  lol
+        Termios only allows tenths of seconds for read anyway.
+            Hmm, seems read() wants to wait for at least one byte, it's a between byte counter.  Doh!
+        Select() is likely less simple, poll() the same, and epoll() seems to be linux specific.  All allow more precise timeouts.
+        On the other hand, Rob is using poll() in netcat.
+
+Common bits / differences.
+    Initial toybox command arguments.
+        Ability to change those within the editor.
+    Files - passed as arguments, or can add / remove them from the running editor.
+        Process the file through some proggy, or just some function of the editor script.
+        Save / save as / backups.
+        Modelines are actualy discouraged as a security issue by the standard, but encouraged by toybox to use vi modelines.
+        Filename completion.
+        Filename prompts could have a couple of features.
+            Can pass things in and out of a shell command, append to the file, edit a specific fixed section of a file or special file (disk block editing!), or use stdin and stdout (joe in a pipe).
+    Directory / file browsing in a window.
+    Windows per current design.
+        Multiple files in the command line each have their own window.
+        Different / same file in each.
+        Each has it's own cursor / marks / block, etc.
+        Delete / scroll some other window.
+        Open a file in some other window, possibly creating one first.
+        Show one window full screen.
+        Method to show some hidden window, can be hidden if there's not enough space for them all.
+    Buffers - holds the contents of the files being edited / viewed.
+        Attached to windows, but can shift them around?
+        Edit / view / read only, named / unnamed buffers.
+        Special purpose buffers.
+            Emacs has - scratch, help, grep, compile, gdb, man, shell, probably others.
+                Though most of those are just running some other command in a window.
+            Kill ring buffer.
+                Kill goes to the buffer, delete just vanishes, on the other hand, this is really the difference between "cut" and "delete".
+                "Yank" just means "paste from kill buffer" then.
+        Emacs can have different working directory for each buffer, OR one global directory.
+        List them, perform some operation on the members of the list.  Go through them all, prompting to save modified buffers.
+    Display text - navigate within it, scroll it in various ways.
+        Many ways to display otherwise unprintable text.
+            Inverted video for high bit characters.
+            Just show high bit characters.
+            UTF8.
+            ^X
+        Could be a problem with "where's my cursor" for the code.
+        Hex mode, wrap mode, raw / parsed mode, as well as formatted / unformatted mode.
+            Parsed mode has the text being processed by some command specified in the config file.
+            Formatted mode converts common formatting stuff to bold / underline.
+            Line numbers.
+        Scrolling can be definable amounts.
+        Some editors count buffer lines, some display lines.
+        Move to top, bottom, middle of screen / line.
+        Marks.
+            One mark and cursor.
+                Hmmm, Emacs uses the idea of a "point" which is between characters, with the "cursor" on the right side.
+                    Not sure if this will be a problem.
+                Emacs has only one mark, and everything between point and mark is the "region", a block I think.
+            Multiple marks - numbered, named, just arbitrary, automated marks for various reasons.  Line / line and character marks.
+            Next / previous / goto / remove one / all marks.
+        Whitespace / word boundaries / line / paragraph / "sections", etc.  Should be definable.
+            Vi has multiples types of all of them.  Pffft
+        Smooth scrolling (line by line).
+        Slow serial line support - do we need it?
+            Maybe.  B-(
+    Status line.
+        Show cursor position, details of file / character under cursor / working directory.  Often used for line input of parameters to.
+        Top of screen, bottom, above the key display in nano.  Can have left, middle, right widgets.
+        Nano has essentially two status lines.
+        Expert mode to turn it off, disable it for more screen space.
+    Regexs - basic / extra / extended
+        Replacable stuff in search & replace.  Ex/vi has this as an option.
+    Commands - invoked immediately with no echo, or typed via readline.
+        Pre command numbers (usually not echoed) / post command arguments.  Also pre command regexs and other things to select the lines to work on.
+        Methods of repeating commands.  Repeat last / next command, possibly X times.
+        Direction / motion.
+        Execute line / buffer / file.
+        Select lines, apply command to them.
+        Parameter expansion.
+    Key handling.
+        Bind / learn keys.
+            Emacs has "keymaps" for major and minor modes, as well as a global one.
+            Unbind keys.  Mask keys from a lower level, but without actually binding them to anything, a NOP.
+        Command keys can be one or more keys.
+            Emacs and wordstar generally use a control key followed by some other key.
+        Show help page in a window with key bindings.  Show binding for specific key.
+        Shortcut keys display.  Nano has two lines of 6 each, showing only the most common.  MC has one line, showing 10 function keys.  No one else cares?
+        Esc key same as Alt / Meta key OR used for function keys OR used by itself.  sigh
+        Meta key used to insert high bit characters.
+        Abort current command key.
+        Emacs has a keymap per buffer, which is the keybindings.
+            A global keymap.
+            The buffers major mode keymap.
+            Minor modes can have keymaps that override the major mode keymap when the minor mode is turned on.
+        Del <-> BS swapping.
+    Readline type widget.  Called "minibuffer" in emacs.
+        For command parameters, also just go to one at the bottom to type commands into.
+        A fullscreen editor could be considered to just be a stack of these.
+        History, completion, editing, escape from.  Position and length.
+            Same editing keys, and treat it just like a one line window.
+            Restricted or different editing keys while in some random line editing mode.
+        Moving readline to some other line (the basis of full screen editing perhaps).
+        Perhaps allow it to autoexpand if the input covers multiple lines.
+            Though that might be better to do as just creating more lines, then moving the readline between them.
+            Still would need the prompt on the top one, and to know to send them all at once when done.
+            How exactly does one create multiple lines?
+                Only way that makes sense is if the ENTER key is different from the "now do this" key.
+                Or wrapping long lines instead of scrolling them.
+        The prompt could include the default in ().
+    Mouse support - left click, double click, scroll wheel.
+        Only used to click on a widget, move cursor, or scroll around.
+        Shift click is used for X cut and paste support, think that just works from the terminal.
+    Shell - In a window / full screen.
+        Make editor a background task with bg / fg standard shell stuff.
+        Pass a block or buffer as stdin.  Append / insert stdout to the buffer.
+        The shell output can just appended to the window contents as text that can be edited like every other window.  When the cursor is at the bottom of the shell windov, stuff typed in is the next shell command.
+    Simple editing.
+        Move cursor, insert, delete, overwrite.
+    Basic editing.
+        Modes.
+            Vi has a lot of them - command, insert, ex, and moooore.
+            Emacs has definable modes that are a different concept to vi.
+                There are "major" and "minor" modes per buffer.
+                Major modes is for file type specific editing like "editing C, latex, etc" or "Dired".
+                    Includes things like indenting, syntax highlighting, function boundaries (for ctags I guess), invoking the right compiler, keymaps, etc.
+                    Can include other specialisations, like a python shell, and dired.
+                Minor modes are extras you can add, they seem to be things like "autofill", "wrap", "overwrite", "line numbers", etc.
+            Insert / overwrite mode.
+            Automatic detection of file type (typically source files) to put editor into different modes.
+        Cut, copy, paste, delete - blocks, word / line /etc, to end / beginning line, others.
+            To / from other buffers, files, "clipfile", maybe even the clipboard/s (thought that's an X thing I think).
+        Blocks - cut, copy, move, write to file.
+            Unhighlight block.
+        Search / replace - regex / shell glob / straight text / whole words.  Case / charset sensitive.  Forward / backward.
+            Regexs - basic / extra / extended
+            File / all files / within selection.  Wrap around searching.
+            Incremental.  Interactive / all replace.  Inverted (find non matches).
+            Highlight / filter found.
+            Regex for the replace bit.   Replacable stuff in search & replace.  Ex/vi has this as an option.
+            Can search mixed hex and strings.
+            History, repeat, repeat in other direction.
+        Modified state.
+            Can be used by some commands to pester the user.
+            Ability to turn that state off.
+        Tabs / spaces / half tabs.  Setting tab size.
+    Advanced editing.
+        Insert a character that is otherwise hard to insert, like command keys.
+        Insert date/time.
+        Quick search for a character in current line / forward / back.
+        "Smart" home, home goes to actual beginning, or first non blank.
+        Replace lots of space horizontally / vertically with just one / zero spaces.
+        Insert empty line/s above / below.
+        End of line space removal.
+        Allow cursor beyond end of line.
+        Visible white space.
+        DOS / Mac line ending convert.  On the other hand, might just be good to do that transparently, remember on read, convert on save.
+        Change text encoding.
+        Add a newline at end of file if it's missing one.
+            Think we are doing that anyway, but an option to turn that off might be good.
+        Transpose, upper, lower, reverse case, capitalize words.
+        Adding a prefix / suffix string to selected lines.
+        Indent / outdent / line wrapping / centreing which can be auto / manual.  Left and right margins.
+        Column blocks.
+            Deleting might just replace the column block with spaces / tabs.
+        Macros.  Various ways of defining / invoking a macro.
+            Nested macros.
+        Auto expanding abbreviations.
+        Auto save after certain commands, or certain time.
+        Multi level undo / redo.  Also undo current line (revert it?).
+            Disable undo.
+            Ability to list the undo "records"?
+            Emacs undo boundaries?
+        Spell checker.
+        Pretty printer (likely via shell command like indent).
+        Email quote handling.
+        Count / highlight lines matching or not matching regexes.
+        Sort block.
+        Persistant cursor position and selection.
+        Complete the word being typed based on other words in the file.
+    Code editing.
+        Ctags - basically lookup a symbol (word cursor is on) in the ctags files, which gives you a position in some other file that defines this symbol.  Then display this other file somehow, probably allowing editing.
+            Ctags is in the standards, but do we want to write a toybox version?
+        Bracket / character matching.  Goto / highlight matching bracket.  Auto insert the closing one.
+            Include "insert one, blink the other".
+            Auto detect code block for indenting?
+        Syntax highlighting.
+        Next / previous error (compile errors usually).
+
+Readline.
+    toybox has get_line() and get_rawline(), but they are not interactive readlines.
+    In order to have our readline() be useful for generic use, the keystrokes that do stuff must be definable.
+    So, what do we need?
+    GNU readline has (leaving out a few things) -
+        Editing
+            How is a "word" defined?.
+            Hitting ENTER anywhere in the line submits it.  An editor would want to actually insert the ENTER into the text.
+            Move cursor / insert / delete / backspace / undo (all the way back) / revert.
+                Perhaps redo might be nice.
+            Move cursor to start / end of line, forward / back one word, redraw.
+            Cut / copy / paste.  Kill ring with ring rotation?
+                Entire line.
+                All spaces around cursor.
+                From cursor to mark.
+                Highlighted block.
+                From cursor to start / end of line.
+                    to end of word, or end of next word if between words.
+                    to beginning of word, or of the previous word if between words.
+                    to previous white space.  Different from above coz apparently white space is different from word boundaries.  shrugs
+            Numbers in front of commands.  Vi and emacs probably need this?  More and less "needs" this.  Otherwise... eww.
+                For repeats, or sometimes to reverse the direction if it's negative.
+            Insert / overwrite mode.
+            Upper and lower casing characters or words.
+            Transpose characters / words.
+            Marks - setting a mark and moving the cursor to it / swapping with it.
+            Character search within the string - forward / back.
+            Insert comment - bloat we don't need.
+        History.
+            Back / forward one line.  Goto start / end of history.
+            Incremental and non incremental searching, forwards or back.
+                During incremental search - ability to abort and restore original line.
+            Remember the last (incremental?) search.
+            Either return the found history (ENTER), or allow editing (editing keys).
+            Option to save edited history lines, and mark them as edited.
+        Show key bindings / macros / etc.
+        Tab completion.
+            List / select completions.
+            Cycle through the matches.
+        Macros!
+        Config files.
+            Not likely to emulate these, we have our own needs, and it's not a standard.
+        Expansions.
+            MC will want argument expansions at least.
+            Though perhaps this is best left to the code that calls this to expand the result.
+
+more
+    Can handle switch between multiple files.
+    Searches are regexs.  Can also search for non matches.
+    Multiple marks.
+    Forward and back half screenful, with "half" being the specified number, but defaulting to actual half.
+    Shell commands (not in the standard).
+    Invoke the editor mentioned in EDITOR, or default to vi.  Pass line number if it's vi.
+    Print info about file.
+    Ctags.
+    Some commands are single letters, some are ":" followed by a single letter, possible with more text, then ENTER.
+        Or other variations.
+
+less
+    Has bracket matching, but only from top-open / bottom-close.
+    Can search between multiple files, or add more.
+        Files on the command line, add / remove files, just open a new file now.
+    Highlight found text.
+    Filter found lines.
+    Option to NOT do regex search.
+    Change the command line arguments while running.
+    Shell commands with replacable params.
+    Input processor - some proggy that the input file is processed through, the output of that is shown.
+        Um, why not use pipes and input redirection?
+
+ed - obsolete for toybox, ancestor of ex.
+    A line editor.
+    In command mode, type the command, then ENTER.
+    In input mode, type text, with "." on a line by itself to go back to command mode.
+    Uses one or two optional line addresses (can be regex) followed by a single character command, then arguments.
+    The "address" can be various symbols with various meanings, see the manual.
+    Usual basic editing and navigation commands.
+    Join lines.
+    Mark lines.
+    Display lines (with line numbers).
+    Copy / move lines.
+    Apply a command to a bunch of lines matching / not matching the address.
+    Insert a file / write lines to a file.
+    Search and replace.
+    Undo.
+    Shell command, with filename replacement character.
+
+sed
+    Stream editor.
+    Fairly similar to ed, except it applies a script of commands to each line in turn.
+    Branch to a label within the script.  Can test if a substitution happened before deciding to branch.
+    Includes a "hold space" for cut and paste type operations, as well as swapping.
+    Can output line numbers.
+    Can read in a file, or write to one.
+    Can be commented.
+
+ex - obsolete for toybox, but part of vi.
+    A line editor, apparently the line oriented editing mode for vi.
+        So while the command itself is obsolete, it's internal stuff might be needed for vi.
+        In fact a lot of the standard for vi just refers to ex.
+        ":" means to perform an ex command from vi.  lol
+    Starts in command mode (":" prompt).
+    Basically a "type command then ENTER" command mode.
+    Text input mode (append, insert, change) ended by "." on it's own line.
+    Has line addresses before the commands, similar to ed.
+    Commands have complex parsing requirements.  Ewww.
+    Has some really basic command line editing.
+    Has a bunch of buffers, with modes.  Commands apply to a named buffer, or the unnamed one if no name is given.
+    Abbreviations and maps.  Same thing?  They interact.  lol
+        Think the difference is that maps don't have to have blank space after them.
+        They expand during typing.
+        Seems that maps are for binding to keys?
+    Set various options.
+    Shell command, with optional interaction.
+    Read commands from a file.
+    Can scan ctags files looking for regexs.
+    Can switch to "open" and "visual" modes, whatever they are.
+        "Visual" mode is just vi.
+        "Open" mode I think is a vi for dumb terminals?
+    Has a concept of "window", also not sure what that is.  Might just be the number of terminal lines.
+    Shell escape - pass selected lines to a shell command, replace them with whatever it returns.
+    Shift lines back and forth.  Indent and outdent in other words.
+    Execute a buffer as ex commands.
+    Regexs have extra thingies.
+    Replace commands can refer to other bits of text using parameters.  See the manual.
+    Autowrite - basicaly save the file after certain commands.
+    Mode that strips out non printables on file read.
+    Can be made ed compatible. lol
+    Can display line numbers.
+    Paragraph boundary pairs can be set.
+    Definable scroll distance.
+    Visual and open modes have "sections", with definable pairs of boundary characters.
+    Can show matching braces.
+    Can optionally warn on some commands if the buffers are modified.
+    Margin auto wrap and end of line blanks removal.
+    Can wrap searches.
+    "modelines" (as used at the top of toybox source files) are apparently is strongly discouraged by the standard.  shrugs
+    Overlaping copies are allowed.
+    Automatic marks created sometimes.
+
+vi
+    Notable for it's variety of modes, and it's standard command mode that uses non echoed ordinary keys for common commands.
+    "Visual" editor, a screen oriented superset of ex, that lets you use ex commands.
+    A lot of the standard simply refers to ex.
+    Seems to mostly be similar to ex commands, only done full screen, and with full screen navigation.
+    Has "open" and "visual" modes, but not sure what they are.  Also "ex" mode, with means using ex commands.
+        I think "open" mode is for dumb terminals, it's all done on the bottom line, perhaps with full screen redraws.
+        "Visual" mode then must be full screen editing.
+    Text input mode can return to command mode with Esc.
+    Has five kinds of "words" and four kinds of "bigwords", six types of "sections", four types of "paragraphs", and three types of "sentences".
+    There can be a multi digit count before commands, it's not echoed anywhere when not in a command line mode, the command key then does its command count times.
+        For instance typing "12h" does not echo anything, but just moves the cursor back 12 places when the "h" is hit.
+        Lots of those seem to be letters, or control keys, though there are others.
+    [count] ! motion shell-commands <newline> run a shell command, replacing count lines with the output.  Looks like you get to type and edit the command while you see it.
+    Move to matching brace.
+    Repeat last command, for specific commands.
+    Move to last context, where I think "context" means where we was before the last command, it gets a special mark.
+    Move to words, bigwords, sections, paragraphs, etc.
+    Reverse case.
+    Find character in current line.  Move cursor to before / after specific character.
+    Move to top / middle / bottom of screen.
+    Insert empty line above / below.
+    Paste above / below, depending on if the buffer is line or character mode as well.
+    Replace count characters with the entered character.
+    Undo current line.
+    Some editing command keys while in text input mode.
+
+nano
+    Has a file browser mode.
+    Has a title bar, with three areas for showing status type info.
+    And a status line, which shows messages and lets users type stuff like file names.
+    Optional shortcut lists show 12 of the most common keystrokes in the current mode, and can be mouse clickable.
+    Mouse moves the cursor, double click sets marks.
+    "Smart" home - the usual go to first non blank, or go to actual start of line.
+    Tabs to spaces.
+    Multiple file buffers.
+    Search and replace history.
+    Deal with DOS / Mac line endings sanely.
+    Restricted mode.
+    Smooth scrolling.
+    Setting tab size.
+    Syntax highlighting.
+    Display cursor position.
+    Backspace and delete fixes, coz that's always confusing.
+    Autoindent.
+    Optional line wrap.
+    "Soft wrapping", no idea what that is.
+    External spell checker.
+    Undo and redo.
+    Hard to use method to insert otherwise unusable characters.
+    Optional search case sensitivity.
+    Optional regex searches.
+    Email quote handling.
+    Source code bracket handling of some sort.
+    Turning command line options on and off within the editor.
+    Write selected text to a file.
+
+microemacs (microGNUemacs  lol)
+    Go to line number.
+    Scratch buffer, help buffer, grep buffer, compile buffer.
+    Named buffers - per file.  Can have their own working directory, or a global one for all.
+    Kill a named buffer, prompting if it's changed.
+    List buffers.
+    Has the concept of "modes", default ones are - fill (wrap), indent, overwrite, and notab.
+        Can set a list of (minor?) modes as default for buffer creation.
+    Run a script (commands from a file).
+    Split windows.  B-)
+    Window / buffer specific cursor and mark (depending on which emacs you have).
+        Can swap them.
+    Esc key same as Alt-key.
+    Get help, describe binding, describe key briefly (hit a key, it's binding is displayed).
+    Apropros - prompt the user for a string, open help buffer, list all commands with that string.
+    Auto execute - a shell glob pattern that is matched on files read into buffers, then executes a command.
+    Recenter - position cursor in center of screen / center of line / center of line counted from the bottom.
+    Open line - open up some space by inserting empty lines below cursor, leaving cursor at the top of them.
+    Quoted insert - insert the next key verbatim, ignoring what it's bound to.
+    Universal argument - repeat the next command 4 times, can apply to itself.
+    Toggle read only.
+    Find file read only.
+    Find alternate file - loading a different file into the current buffer, erasing the original buffer contents.
+    Find file in buffer, or load it into new buffer, then switch to it.
+    Find file other window - opens file in new buffer, splitting the window if needed.
+    Delete window.
+    Delete other windows.
+    Split window.
+    Enlarge / shrink window.
+    Next / previous window.
+    Scroll other window - scrolls the next window X pages.
+    Switch to buffer other window - "switch to buffer in another window"?
+    Switch to buffer - ask which buffer should be in this window.
+    Switch to a shell screen, and back again.
+    What cursor position - show a bunch of info about cursor position and what's there.
+    Next / previous error.
+    Dired - basically a multi window MC.  lol
+    Save some buffers - looks for buffers that need saving and prompts user.
+    Just one space - delete all white space around cursor, then insert one single space.
+    Query replace - an interactive search and replace.  Also a replace all with no interaction.
+        Oh nice - can do a search and replace with a regex for both the search string, AND for the replacable strings (selecting which ones get replaced with that regex).
+    Beginning / end of buffer.
+    Capitalize / upper / lower word.
+    Delete word.
+    Delete blank lines.
+    Delete horizontal / vertical space.
+    Delete leading / trailing space.
+    Delete lines non / matching regex after cursor.
+    Hmm, difference between "kill" and "delete"?
+        "Kill" goes into the kill buffer, "delete" just vanishes.
+        "Yank" inserts things from the kill buffer.
+        Kill buffer is a ring buffer in full emacs, but might not be a ring in microemacs.
+        So it's just an old fashioned concept for "cut and paste".
+    Fill paragraph - just means to wrap and justify it.  Command to ask the user what the wrap column is.
+    Copy region as kill.
+    Execute extended command - does the readline thing to ask user for a command and arguments to run.
+    Execute one buffer / line.
+    Not modified - turn off the modified flag in current buffer.
+    Blink and insert - insert a character, then search backwards for it's match (bracket, or the character itself) and blink that.
+    Mini buffer - it's just a readline for command arguments and such, but treated as a one line window, with an uneditable prompt.
+        It does have the trick of expanding to more lines if it's content goes over multiple lines.
+        The prompt can include a default argument in ().
+    Numbers can proceed commands, seems to be what the universal argument is for.
+        Looks like they have a key to introduce them, then get put into the mini buffer.
+        "Digit-argument" and "negative-argument" might be the functions for that.
+    Swap Del and BS.
+    C program "mode" - no idea what that involves.
+    Count regex non / matches.
+    Define key (includes a keymap, what ever they are).  Can also undefine a key, and there's a "global" keymap.  Can also bind keys in specific modes.
+    Meta key can insert 8 bit characters, or not.
+    Keyboard quit - abort current action.
+    Insert spaces instead of tabs.
+    Toggle overwrite / insert mode.
+    Add a prefix string to lines in a selected region.  Or set that string.
+    Show working directory in the status line.
+    Refresh screen, including recomputing window sizes if needed.
+    Scroll window without changing cursor position within window.
+    Toggle read only.
+    Undo boundaries?
+    Undo on/off.
+    List undo records for current buffer, in a new buffer.
+
+wordstar (joe, turbo C) - Using joe, which also comes in emacs and pico flavours.
+    Help window, with commands to page through that help text.
+    Something about "inverting" 8 bit characters, but we want to be 8 bit clean.  Not a WordStar thing I think.  shrugs
+        Ah, for displaying high bit characters in other languages, normally inverts the display, but "as is" mode just prints them normally.
+    Option to auto append a new line at end of files on save.
+    Option to disable the status line.
+    Windowed & buffered like emacs, but for when it's pretending to be emacs.
+        Can be windowed anyway.
+        Split window on same file.
+        Make one window full screen.
+        Can move to hidden windows (hidden when there's not enough space for them all).
+        Horizontal split only.
+        Height change.
+        Multiple files on the command line go to multiple windows.
+    Option to define how many lines are kept on screen between page up / down commands.
+    Option to not use X lines at the top, for embedding in a BBS.
+    Multi level undo and redo.
+    Scrolling.
+    Automatic detection of source code files, other types get word wraping and autoindent by default.
+        Can set left and right margins for word wrapping.
+        Can center between them to.
+        Can manually indent lines, highlighted blocks, or autodetected code blocks.
+    Command to insert a single space while in overwrite mode.
+        Overwrite mode makes backspace just move left, no deleting.
+    File name completion.
+    History.  History is described as a single line read only edit window, just like other windows, so the usual commands will work in them.
+    Status line can be edited in the setup string, to add or remove escape sequences that include various things.
+        Also a command to show the cursor position and character code in the status line.
+    Suspend the proggy and go to shell.  Actually, I think most editors have this in some form or another.
+        Most seem to use the shell foreground/background thingy for this.
+    Search prompts for the thing to search, then prompts for a bunch of character flags that are search options.
+        One of the options is if this is a replace command, then it prompts for the replacement text.
+        It's regexs are slash escaped.
+    Highlighted block can be sent through a shell filter command.
+    Highlighted block can be un highlighted.
+    Macros keyed by digit, and can be nested.
+    Repeat command, hit the repeat, type the numbers, hit the command you want repeated.
+        Also works with characters.
+    Column select mode.
+        Delete block command replaces the entire column with spaces and tabs instead of deleting.
+    Ctags support, prompt for symbol (default is word the cursor is on), search ctags files, replace the file in the current window with the file ctags points to, and the cursor position of the symbol definition.
+    Shell in a window.
+        Very intersening, the shell output is just appended to the window contents as text that can be edited like every other window.  When the cursor is at the bottom of the shell windov, stuff typed in is the next shell command.
+    Filename prompts have a couple of features.  Can pass things in and out of a shell command, append to the file, edit a specific fixed section of a file or special file (disk block editing!), or use stdin and stdout (joe in a pipe).
+    Keys can be bound in the settings file.
+
+mc viewer
+    Hex mode.
+    Can search mixed hex and strings.
+    Wrap mode.
+    Raw / parsed mode toggle, as well as formatted / unformatted mode toggle.
+        Parsed mode has the text being processed by some command specified in the config file.
+        Formatted mode converts common formatting stuff to bold / underline.
+
+mcedit / cool edit
+    User menu - run a script, insert result.
+    Mark columns.
+    Bookmarks, toggle, next, previous, "flush" (meaning to remove all bookmarks.)
+    Copy / cut insert clipfile as well as prompting for a file.
+    Highlight all lines with found text.
+    Search for hexidecimal, within selection, for whole words, and in "all charsets".
+    Goto matching bracket.
+    Show line numbers.
+    Find "declaration", back from and forward to declaration.
+        It's ctags support.
+    Change text encoding.
+    Create, invoke, and delete macros (hotkeys).
+    Spell check.
+    Email current file.
+    Sort selected lines.
+    Insert output of shell command.
+    Format (wrap) paragraph.
+    Run external format script on selection.
+    Insert date/time.
+    Half tabs.
+    Persistant cursor position and selection.
+    Visible white space.
+    Optional go beyond end of line.
+    Learn keys.
+    Syntax highlighting.
+    Edit syntax and menu files.
+
+Make the fancy features optional in the "wrap if(constant) around things so the compiler can optimise it out" way that Rob likes.
+    So the basic compile choices are -
+        File / stdout viewer.
+        Editor (the following options might depend on how the "pluggable" part is done).
+            Minimal vi?
+            Nice to have vi?
+            Minimal emacs?
+            Nice to have emacs?
+            Nano?
+            Minimal mcedit/cooledit?
+            Nice to have mcedit/cooledit?
+        Lists.
+        Simple top like.
+        Fancy top like.
+        Simple shell.
+        Fancy shell.
+        Basic MC.
+        Full on MC with all bells and whistles.
+    With the fancy compile options being (only if they are substantial amounts of code to support) -
+        Full popups or mere single line prompts?
+        One pane, or multiple panes?
+        Function key single line 'box'?
+        Menu?
+        Status line?
+        Border texts?
+        Border widgets?
+        Sortable lists?
+        History lists?
+        Progress bar?
+        Shell text substitutions?
+        Scriptable?
+        Learnable keys?
+
+Probably got most of what we need to do screen / tmux / multitail, and other full screen terminal stuffs.
+
+Are we ncurses yet?  Or twin?  lol
+
+------------------------------------------------------------------------------------------------------
+
+NOTES
+
+From Rob -
+----------
+
+On 06/21/2012 09:28 AM, David Seikel wrote:
+> What are the chances that get_optflags() could be made re usable by
+> toys?  
+
+Well, right now you can put a NULL as your optstring and then set
+which->options yourself and call get_optflags().
+
+> For toys that need to make their own little scripting system for
+> example.  Currently it seems to want to use the toys global, and I'm
+> not sure if it's safe to screw with that after pulling all of my toys
+> options out of it.
+> 
+> Would it get reused like that for shell internal commands?  
+
+Already does. In toys/toysh.c function run_pipeline() look for the
+TOYFLAG_NOFORK bit.
+
+This probably needs to be genericized somewhere in lib, but I never got
+around to it.
+
+From Rob -
+----------
+
+I need to write a getline() with cursor control, which means I need to
+query the tty size. The magic for that is:
+
+struct winsize tty = { 0, 0, 0, 0 };
+int ret = ioctl(1, TIOCGWINSZ, &tty);
+
+plus $COLUMNS and $LINES, plus echo -e "\e[s\e[999C\e[999B\e[6n\e[u"
+
+Add command history parsing to getline().
+
+From Rob -
+----------
+
+Digging up ancient issues from toybox development, one of which is an
+interesting design issue with querying the terminal size.
+
+When you're on a serial console (happens a lot in the embedded world),
+the local tty device doesn't know the width and height of the window at
+the far end, so ioctl(TIOCGWINSZ) can't report it to you.
+
+If the term program at the other end supports ansi escape sequences
+(everything does, including xterms), there's an escape sequence you can
+use to ask it, but there's multiple levels of non-obvious to the
+implementation.
+
+The escape sequence itself is "\e[6n", to which the terminal program
+responds with another escape sequence, "\e[YY;XXR" where the "XX" part
+is a decimal number with the current cursor's Y location, and XX is the
+cursor X location. (Both decimal, top left is 1;1.)
+
+Since what we want is the size of the screen, we wrap that in some more
+commands, saving the current position, moving to the cursor 999 down and
+999 to the right (which should stick it at the lower right corner),
+query that position, and the jump back to the saved location. The full
+escape sequence is therefore "\e[s\e[999C\e[999B\e[6n\e[u".
+
+The problem is, the response comes back from the terminal program on
+stdin: along with whatever else is coming in on stdin. There could be a
+delay of a significant fraction of a second (especially through a rial
+port, even when you aren't overcommitted and swapping), and there's no
+guarantee the terminal will actually respond. So blocking and waiting
+for a response isn't the greatest idea, and can eat other input the user
+has queued up.
+
+This means you need to do a nonblocking read, assemble an ansi sequence
+a piece at a time (luckily the term programs generate these atomically
+so you don't get part of an ansi sequence with user-typed keys in the
+middle of it), and keep any other data you get for use later. The
+logical place to do this is in the line editing code the shell has to
+have anyway, which responds to cursor keys, page up and down, and so on.
+
+From Rob -
+----------
+
+Less has to get it _right_, as does line editing for a command shell.
+Even before you get to cursor up: unix tty handling is epically crappy. 
+My commodore 64 could backspace past the left edge of the screen and 
+continue from the right edge one line up.  A TRS-80 could do this.  Unix 
+derivatives _can't_, you have to know when you're at the left edge of 
+the screen and do the ansi sequences for "cursor up one, jump right 
+999".  Which means you have to know when backspace puts you at the left 
+edge of the screen, which means you need to know when outputting normal 
+characters put you off the _right_ edge of the screen...
+
+That's right: if you don't know what your current screen size is, your 
+command shell can't backspace past a line wrap.  Welcome to unix 
+terminal handling.
+
+From Rob -
+----------
+
+Here's a fun one:
+
+cat /proc/mounts | less
+
+When less outputs the escape sequence to query terminal parameters, it  
+has to peek not stdin but /dev/tty.  Except the cursor keys scrolling up  
+and down also come from /dev/tty, as do "user hit forward slash and  
+wants to type in a search regex"...  Innit fun?
+
+Plus you have to figure out the width of what you're outputting, which  
+means isprint() and probably UTF8 awareness...  (Flashbacks to  
+fontmetrics in java 1.1, but we can assume monospace text grid...)
+
+From Rob -
+----------
+
+Alas, POSIX does not seem to like simple.  To start with, the spec
+requires "more" to be terminal aware, which isn't entirely surprising
+given what it does.  But it's not just _height_ aware, it's width aware
+too.
+
+It's actually kinda fiddly: more needs to be able to wrap lines at the
+screen size to figure out when to prompt, but the first 32 ascii
+characters (all the stuff below space) don't consistently print one
+character.  Some print nothing, some move the cursor around (tab,
+newline, linefeed, backspace, form feed, whatever the heck "vertical
+tab" does...)
+
+In theory I can hijack catv and just escape most of the low-ascii
+weirdness (so it's two characters, but it's _consistently_ two
+characters whatever $TERM thinks).  In practice, when not hooked up to a
+tty more is supposed to act like cat and pass data through unmodified...
+
+I plan to do the simplest standards conformant implementation I can, and
+every once in a while I go "you know, the standard's nuts, let's just
+document the divergence"...
+
+
+From Rob -
+----------
+
+Keep in mind that Unix doesn't implement backspace sanely (like the
+commodore 64 did), thus you have to figure out when you're at the left
+edge of the screen (keeping track of your cursor position)
+
+That's why if you do "echo -n this will screw bash up" and then cursor
+up a few times bash's command history gets all wonky because it _thinks_
+it knows where the cursor is but actually started farther to the right. 
+(I contributed ansi escape screen position querying code to busybox to 
+improve the situation for ash.)
+
+From Rob -
+----------
+
+The question here is how much of this we already need to do for shell
+history, which is what I was going to implement first. (Actually the one
+I've already sat down and wrestled with is "more", which turns out to
+have rather a lot of these issues as well. Knowing what printable
+characters actually _print_ so you know where your darn cursor is and
+where the screen wraps. You'd think less would have more issues here,
+but more actually hits just about all of 'em...)
+
+Moving the cursor isn't the issue. Querying the screen size is a
+reasonably contained issue. Knowing how the cursor will move when you
+print out an arbitrary string: that's the hard part. (utf8 awareness is
+kinda required here. And I'm assuming a monospaced font even in klingon.
+And replacing the !isprint() characters below space with escape
+sequences...)
+
+
+From Rob and others -
+---------------------
+
+http://lists.busybox.net/pipermail/busybox/2008-October/067348.html
+
+http://lists.busybox.net/pipermail/busybox/2009-May/069314.html
+
+From Rob -
+----------
+
+Implementing ascii programming in the library itself was what I was
+referring to.  (It's on my todo list...)  All sorts of stuff needs it:
+more, toysh, vi...  Even ls wants to know the width of the screen for -C
+mode.
+
+The problem is parsing the replies, since the user could type arbitrary
+stuff.  It's stdout that needs to be a tty (because "ls | blah" is not
+going to a tty even if stdin is a tty), but the input _could_ come back
+in on stdin if that's another filehandle to the same tty... as could any
+other random input.  If you're filtering all your input through a line
+reading function that needs to parse cursor keys to implement command
+history, doing this is easy. But if _all_ you care about is the probe
+response and you want to leave the rest of the input alone, it's kinda
+hard.
+
+What I might wind up doing is adding it to toysh and having that export
+COLUMNS and LINES environment variables. It wouldn't catch resizes in
+the middle of a command, but I think I'm ok with that...
+
+
+------------------------------------------------------------------------------------------------------
+
+/*
+key / mouse     -> command
+menu choice     -> command
+border click    -> command
+popup + args    -> command
+typed string    -> command
+script call     -> command
+script callback -> command
+C call          -> command
+
+Arguments - should use the same argument defining stuff as used by the toys.
+    Keys and menus have to have fixed arguments, and take the rest from their content.
+    Popup and typed get their arguments from what the user selected in the popup, or typed.
+    Popup is told what it's widgets are and how they map to arguments.
+    Popups eventually construct a command string.
+    Script call uses generic text to call the command and set it's arguments.
+    Script callback should be similar.
+    C calls can call the functions direct, or even just pass a string command.
+
+So every command call involves it's content, and can take default arguments from that content, to be overridden by arguments.
+Keys and menus just have arguments coded into their string on definition, though might mostly be argument less.
+Popups have a structure that defines their argument widgets, and how to turn them into command arguments.
+Popups need to be created from string commands to.
+Typed commands can just have their arguments as part of the typed string.
+Scripts and callbacks just send a string that is treated the same way as typed commands.
+C can do the same as scripts, but should be able to call things directly.
+
+Sending commands back to scripts, should use the same format as our commands.
+
+Would be nice to have parameter substitution to, but that would have to be per content.
+
+Use an event system.
+
+---------------------------------------------
+
+Events
+    keystroke / mouse click
+    menu item select
+    timer
+    draw all
+    scroll contents
+    box was redrawn?
+    box destroyed
+    leave box
+    enter box
+
+void doScript(struct content *content, char commandString, struct event *event, void *blob)
+
+Define a command
+    name, argsDefinitionString, pointer to C function - void myCommand(struct box *box, char *command, struct ToyboxArguments *args, struct event *event, void *blob)
+
+Define a key
+    keyName, commandString
+
+Define a menu item
+    menuTitle, commandString
+
+Define a border widget
+    borderPosition, borderType, textOrCommand
+
+Define a popup
+    popupName, commandStub, thingThatMapsWidgetsToArgs
+
+Define a script callback
+    name, command, someKey
+
+---------------------------------------------
+
+Script interface.
+
+We might have multiple scripts running, but only one per box.
+    But what if a script wants to split it's box?
+They can't access our data structures, and we can't access theirs.
+All needs to be done via stdin/stdout plain text, which should all look like the commands in the rest of the system.
+
+Scripts can register simple callbacks on these events - key, menu, timer, box destroyed.
+The first three might want to return a damage list.
+The last means that the box wants to be destroyed, but the script gets a chance to clean up.
+
+Scripts need to be able to hook into the damage system, so there needs to be a text representation of damage areas.
+
+boxes  <->  script
+
+Boxes knows which script is attached to which box.
+Registering a key for the box is optional, and it's only passed back if it exists.
+A split box gets no key, or can have the key optionally sent with the split command.
+    So how does the script deal with stuff coming from multiple boxes?
+
+<-      keyForBox someKey
+<-      registerKey keyName, commandString   arguments
+<-      registerKey keyName, callBackCommand arguments
+user hits a key
+    if the key has a command, execute it.
+        if the command is not one of ours, send it to the script instead
+->      callBackCommand arguments, someKey
+        otherwise do our command
+    else
+        send the key event to the script.
+->      handleEvent keyName, someKey
+
+    In any case, the script might want to change things in response.
+    Note that it could do these at any time.
+<-      damage x, y, h, w
+        line
+        line
+        line
+        line
+->      doneRedraw someKey
+<-      border borderPosition, borderType, textOrCommand
+<-      status line
+
+ *
+ */
+
+
+struct function
+{
+    name                        // Name for script purposes.
+    description                 // Human name for the menus.
+    type
+    union
+    {
+        *scriptCallback
+        *cFunction
+    }
+};
+
+struct command
+{
+    key                         // Note that any given context might have different keys for any given function.
+    *function
+};
+
+struct item
+{
+    type
+    union
+    {
+        *command
+        *menu
+    }
+}
+
+struct menu
+{
+    *items[]                    // Circular pointer definiton for sub menus.
+}
+
+struct context                  // Somehow I get the feeling I'm having a failure of imagination here with the menus and function keys.  Might be better to manage them seperately per box, but have common ones available?  Nano might have a problem with this.
+{
+    *commands[]                 // The master list, the ones pointed to by the menu structs should be in this list.
+    menu *menu                  // Can be NULL.
+    menu *functionKeys          // Can be NULL.
+    // This can be used as the sub struct for various context types.  Like viewer, editor, file browser, top, etc.
+    // Could even be an object hierarchy, like generic editor, which Basic vi inherits from.
+};
+
+char borderchars[][]
+{
+    // usual box graphic symbols
+    '-|+',
+    // ANSI code for inverse spaces.
+}
+
+struct borderWidget
+{
+    text
+    *clickFunction(int position)
+}
+
+struct border
+{
+    *topLeftWidget
+    *topRightWidget
+    *bottomLeftWidget
+    *bottomRightWidget
+    *leftWidget
+    *rightWidget
+}
+
+struct damage
+{
+    X, Y, W, H                  // The rectangle to be redrawn.
+    char **lines                // Pointer to an array of text lines, or NULL.
+    *damage                     // Perhaps a linked list might be in order, for fast redraws.
+}
+
+struct content                  // For various instances of context types, in other words, the editor might have several files open, so one of these per file.
+{
+    minW, minH, maxW, maxH
+    *context
+    *handleEvents()             // Should set the damage list if it needs a redraw, and flags if border or status line needs updating.
+                                // Keyboard / mouse events if the box did not handle them itself.
+                                // DrawAll event for when drawing the box for the first time, on reveals for coming out of full screen, or user hit the redraw key.
+                                // Scroll event if the content wants to handle that itself.
+                                // Timer event for things like top that might want to have this called regularly.
+    *doneRedraw()               // The box is done with it's redraw, so we can free the damage list or whatever now.
+    *delete()
+    // This can be used as the sub struct for various content types.
+};
+
+struct contentData
+{
+    *border                     // Can be NULL.
+    *statusLine                 // Text of the status line, or NULL if none.
+    offsetX, offsetY, W, H      // Offset and size within the content, coz box handles scrolling, usually.
+    bool redrawStatus, redrawBorder
+    *damage                     // Can be NULL.  If not NULL after content->doneRedraw(), box will free it and it's children.
+    void *data                  // The content controls this blob, it's specific to each box.
+}
+
+struct box
+{
+    box *sub, *parent
+    bool noBorderOnFullScreen
+    bool horizontalSplit        // Marks if it's horizontally or vertically split.
+    splitProportion             // proportion of this boxes part of the split, the sub box gets the rest.
+    *content
+    contentData                 // Data blob specific to this box, passed to each content function.  For sharing contents, like a split pane editor for instance.  Not a pointer, but the struct.
+    X, Y, W, H                  // Position and size of the box itself, not the content.  Calculated, but cached coz that might be needed for speed.
+    cX, cY                      // Position of the content within the box.  Calculated, but cached coz that might be needed for speed.
+};
+
+box root;                       // Always a full screen, parent of the rest of the boxes, or the only box.
+box current;
+bool currentIsFullScreen;
diff --git a/src/boxes/BUGS.txt b/src/boxes/BUGS.txt
new file mode 100644
index 0000000..87c3d4b
--- /dev/null
+++ b/src/boxes/BUGS.txt
@@ -0,0 +1,6 @@
+xterm current box characters are wrong
+joe - ^K^D not working, but ^Kd is
+  Even odder, ^D works, all other ^K^? combinations work.
+F1 seems to not work, at least under xterm.
+
+should clear the command line prompt when not in use
diff --git a/src/boxes/README b/src/boxes/README
new file mode 100644
index 0000000..e01bb6b
--- /dev/null
+++ b/src/boxes/README
@@ -0,0 +1,34 @@
+boxes
+=====
+
+A test bed for a generic editor / pager thingy for the toybox project.
+
+The toybox project is at http://www.landley.net/code/toybox/ and boxes
+is covered by the same license that toybox is.  Basically that's a two
+clause BSD license, but see the LICENSE file from toybox for details.
+
+This is a work in progress, proof of concept, playground, packaged up as
+one big toy, to be self contained until the mess is cleaned up.  This
+"boxes" toy itself will go away, to be replaced by individual editor /
+pager toys and library bits.  Nothing is set in stone, lots of mess
+inside, there's bugs, but at least it shows the general direction my
+mind is wandering in.  As a bonus, it actually works, you can edit
+stuff.
+
+Please don't actually include this in toybox.  Just look at it and sneer
+/ giggle, depending on your nature.  Drop it into the toys directory to
+try it out, it's just one big toy.
+
+If you want to see how it can be used to build specific editors, start
+at the end and work backwards.  Reading the lengthy comments at the
+beginning would also be useful.
+
+Toybox uses mecurial instead of git, but I keep all my stuff on github. 
+Boxes will hopefully be incorporated into toybox in a highly altered
+form some day in the future.  So this is just a temporary git repo for
+my convenience.  If and when boxes migrates to toybox, this repo will be
+retired.
+
+
+BTW, toybox REQUIRES a README file here, a README.md file isn't good
+enough.
diff --git a/src/boxes/boxes.c b/src/boxes/boxes.c
new file mode 100644
index 0000000..4f542e1
--- /dev/null
+++ b/src/boxes/boxes.c
@@ -0,0 +1,2517 @@
+/* boxes.c - Generic editor development sandbox.
+ *
+ * Copyright 2012 David Seikel <won_fang@yahoo.com.au>
+ *
+ * Not in SUSv4.  An entirely new invention, thus no web site either.
+ * See -
+ * http://pubs.opengroup.org/onlinepubs/9699919799/utilities/ex.html
+ * http://pubs.opengroup.org/onlinepubs/9699919799/utilities/more.html
+ * http://pubs.opengroup.org/onlinepubs/9699919799/utilities/sed.html
+ * http://pubs.opengroup.org/onlinepubs/9699919799/utilities/vi.html
+ * http://linux.die.net/man/1/less
+
+USE_BOXES(NEWTOY(boxes, "w#h#m(mode):a(stickchars)1", TOYFLAG_USR|TOYFLAG_BIN))
+
+config BOXES
+  bool "boxes"
+  default y
+  help
+    usage: boxes [-m|--mode mode] [-a|--stickchars] [-w width] [-h height]
+
+    Generic text editor and pager.
+
+    Mode selects which editor or text viewr it emulates, the choices are -
+      emacs is a microemacs type editor.
+      joe is a joe / wordstar type editor.
+      less is a less type pager.
+      mcedit (the default) is cooledit / mcedit type editor.
+      more is a more type pager.
+      nano is a nano / pico type editor.
+      vi is a vi type editor.
+
+    Stick chars means to use ASCII for the boxes instead of "graphics" characters.
+*/
+
+#include "toys.h"
+#include "lib/handlekeys.h"
+
+GLOBALS(
+  char *mode;
+  long h, w;
+)
+
+#define TT this.boxes
+
+#define FLAG_a  2
+#define FLAG_m  4
+#define FLAG_h  8
+#define FLAG_w  16
+
+
+/* This is trying to be a generic text editing, text viewing, and terminal
+ * handling system.  The current code is a work in progress, and the design
+ * may change.  Certainly at this moment it's only partly written.  It is
+ * "usable" though, for a very small value of "usable".  In the following
+ * I'll use "editors" to refer to the toys using this, though not all will
+ * be editors.
+ *
+ * The things it is targeting are - vi and more (part of the standards, so
+ * part of the toybox TODO), less (also on the toybox TODO), joe and
+ * wordstar (coz Rob said they would be good to include), nano (again Rob
+ * thinks it would be good and I agree), microemacs (to avoid religous
+ * wars), and mcedit (coz that's what I actually use).  The ex editor comes
+ * along for the ride coz vi is basically a screen editor wrapper around
+ * the ex line editor.  Sed might be supported coz I'll need to do basic
+ * editing functions that are common to the editors, and sed needs the same
+ * editing functions.
+ *
+ * I will also use this for a midnight commander clone as discussed on the
+ * mailing list.  This would have things in common with emacs dired, so we
+ * might get that as well.  Parts of this code could also be used for a
+ * file chooser, as used by some of the editors we are targeting.  Finally,
+ * the terminal handling stuff might be useful for other toys, so should be
+ * generic in it's own right.  Oh, screen is listed in the toybox TODO as
+ * "maybe", so I'll poke at that to.
+ *
+ * The basic building blocks are box, content, context, edit line, and
+ * view.  A box is an on screen rectanglur area.  Content is a file, and
+ * the text that is in that file.  A context represents a particular editor
+ * type, it has key mappings and other similar stuff.  The edit line is a
+ * single line where editing happens, it's similar to readline.  A view is
+ * a view into a content, there can be many, it represents that portion of
+ * the content that is on screen right now.
+ *
+ * I plan on splitting these things up a bit so they can be used
+ * separately.  Then I can make actually toybox libraries out of them.  For
+ * now it's all one big file for ease of development.
+ *
+ * The screen is split into boxes, by default there are only two, the main
+ * text area and the command line at the bottom.  Each box contains a view,
+ * and each view points to a content (file) for it's text.  A content can
+ * have many views.  Each content has a context (editor).  There is only
+ * ever one edit line, it's the line that is being edited at the moment. 
+ * The edit line moves within and between boxes (including the command
+ * line) as needed.
+ *
+ * The justification for boxes is that most of the editors we are trying to
+ * emulate include some splitting up of the screen area for various
+ * reasons, and some of them include a split window system as well.  So
+ * this boxes concept covers command line, main editing area, split windows,
+ * menus, on screen display of command keys, file selection, and anything
+ * else that might be needed.
+ *
+ * To keep things simple boxes are organised as a binary tree of boxes. 
+ * There is a root box, it's a global.  Each box can have two sub boxes. 
+ * Only the leaf nodes of the box tree are visible on the screen.  Each box
+ * with sub boxes is split either horizontally or vertically.  Navigating
+ * through the boxes goes depth first.
+ *
+ * A content keeps track of a file and it's text.  Each content also has a
+ * context, which is a collection of the things that define a particular
+ * editor.  (I might move the context pointer from content to view, makes
+ * more sense I think.)
+ *
+ * A context is the heart of the generic part of the system.  Any given
+ * toybox command that uses this system would basically define a context
+ * and pass that to the rest of the system.  See the end of this file for a
+ * few examples.  A context holds a list of command to C function mappings,
+ * key to command mappings, and a list of modes.
+ *
+ * Most of the editors targetted include a command line where the user
+ * types in editor commands, and each of those editors has different
+ * commands.  They would mostly use the same editing C functions though, or
+ * short wrappers around them.  The vi context at the end of this file is a
+ * good example, it has a bunch of short C wrappers around some editing
+ * functions, or uses standard C editing functions directly.  So a context
+ * has an editor command to C function mapping.
+ *
+ * The editors respond to keystrokes, and those keystrokes invoke editor
+ * commands, often in a modal way.  So there are keystroke to editor
+ * command mappings.  To cater for editing modes, each context has a list
+ * of modes, and each mode can have key to command mappings, as well as
+ * menu to command mappings, and a list of displayed key/command pairs. 
+ * Menu and key/command pair display is not written yet.  Most editors have
+ * a system for remapping key to command mappings, that's not supported
+ * yet.  Emacs has a heirarchy of key to command mappings, that's not
+ * supported yet.  Some twiddling of the current design would be needed for
+ * those.
+ *
+ * The key mappings used can be multiple keystrokes in a sequence, the
+ * system caters for that.  Some can be multi byte like function keys, and
+ * even different strings of bytes depending on the terminal type.  To
+ * simplify this, there is a table that maps various terminals ideas of
+ * special keys to key names, and the mapping of keys to commands uses
+ * those key names.
+ *
+ * A view represents the on screen visible portion of a content within a
+ * box.  To cater for split window style editors, a content can have many
+ * views.  It deals with keeping track of what's shown on screen, mapping
+ * the on screen representation of the text to the stored text during input
+ * and output.  Each box holds one view.
+ *
+ * The edit line is basically a movable readline.  There are editing C
+ * functions for moving it up and down lines within a view, and for
+ * shifting the edit line to some other box.  So an editor would map the
+ * cursor keys for "up a line" and "down a line" to these C functions for
+ * example.  Actual readline style functionality is just the bottom command
+ * box being a single line view, with the history file loaded into it's
+ * content, and the Enter key mapped to the editor contexts "do this
+ * command" function.  Using most of the system with not much special casing.
+ *
+ *
+ * I assume that there wont be a terribly large number of boxes.
+ * Things like minimum box sizes, current maximum screen sizes, and the fact
+ * that they all have to be on the screen mean that this assumption should
+ * be safe.  It's likely that most of the time there will be only a few at
+ * most.  The point is there is a built in limit, there's only so many non
+ * overlapping boxes with textual contents that you can squeeze onto one
+ * terminal screen at once.
+ *
+ * I assume that there will only be one command line, no matter how many boxes,
+ * and that the command line is for the current box.
+ *
+ * I use a wide screen monitor and small font.
+ * My usual terminal is 104 x 380 characters.
+ * There will be people with bigger monitors and smaller fonts.
+ * So use sixteen bits for storing screen positions and the like.
+ * Eight bits wont cut it.
+ *
+ *
+ * These are the escape sequences we send -
+ *    \x1B[m            reset attributes and colours
+ *    \x1B[1m           turn on bold
+ *    \x1B[%d;%dH       move cursor
+ * Plus some experimentation with turning on mouse reporting that's not
+ * currently used.
+ *
+ *
+ * TODO - disentangle boxes from views.
+ *
+ * TODO - should split this up into editing, UI, and boxes parts,
+ * so the developer can leave out bits they are not using.
+ *
+ * TODO - Show status line instead of command line when it's not being edited.
+ *
+ * TODO - should review it all for UTF8 readiness.  Think I can pull that off
+ * by keeping everything on the output side as "screen position", and using
+ * the formatter to sort out the input to output mapping.
+ *
+ * TODO - see if there are any simple shortcuts to avoid recalculating
+ * everything all the time.  And to avoid screen redraws.
+ */
+
+/* Robs "It's too big" lament.
+
+> So when you give me code, assume I'm dumber than you. Because in this 
+> context, I am. I need bite sized pieces, each of which I can
+> understand in its entirety before moving on to the next.  
+
+As I mentioned in my last email to the Aboriginal linux list, I wrote
+the large blob so I could see how the ideas all work to do the generic
+editor stuff and other things.  It kinda needs to be that big to do
+anything that is actually useful.  So, onto musings about cutting it up
+into bite sized bits...
+
+You mentioned on the Aboriginal Linux list that you wanted a
+"readline", and you listed some features.  My reply was that you had
+basically listed the features of my "basic editor".  The main
+difference between "readline" and a full screen editor, is that the
+editor is fullscreen, while the "readline" is one line.  They both have
+to deal with a list of lines, going up and down through those lines,
+editing the contents of those lines, one line at a time.  For persistent
+line history, they both have to save and load those lines to a file.
+Other than that "readline" adds other behaviour, like moving the
+current line to the end when you hit return and presenting that line to
+the caller (here's the command).  So just making "readline" wont cut
+out much of the code.  In fact, my "readline" is really just a thin
+wrapper around the rest of the code.
+
+Starting from the other end of the size spectrum, I guess "find out
+terminal size" is a small enough bite sized chunk.  To actually do
+anything useful with that you would probably start to write stuff I've
+already written though.  Would be better off just using the stuff I've
+already written.  On the other hand, maybe that would be useful for
+"ls" listings and the like, then we can start with just that bit?
+
+I guess the smallest useful command I have in my huge blob of code
+would be "more".  I could even cut it down more.  Show a page of text,
+show the next page of text when you hit the space bar, quit when you
+hit "q".  Even then, I would estimate it would only cut out a third of
+the code.
+
+On the other hand, there's a bunch of crap in that blob that is for
+future plans, and is not doing anything now.
+
+In the end though, breaking it up into suitable bite sized bits might
+be almost as hard as writing it in the first place.  I'll see what I
+can do, when I find some time.  I did want to break it up into three
+bits anyway, and there's a TODO to untangle a couple of bits that are
+currently too tightly coupled.
+
+*/
+
+/* Robs contradiction
+
+On Thu, 27 Dec 2012 06:06:53 -0600 Rob Landley <rob@landley.net> wrote:
+
+> On 12/27/2012 12:56:07 AM, David Seikel wrote:  
+> > On Thu, 27 Dec 2012 00:37:46 -0600 Rob Landley <rob@landley.net>  
+> > wrote:  
+> > > Since ls isn't doiing any of that, probing would just be awkward
+> > > so toysh should set COLUMNS to a sane value. The problem is,
+> > > we're not using toysh yet because it's still just a stub...  
+> > 
+> > I got some or all of that terminal sizing stuff in my editor thingy
+> > already if I remember correctly.  I remember you wanted me to cut it
+> > down into tiny bits to start with, so you don't have to digest the  
+> > huge lump I sent.  
+> 
+> Basically what I'd like is a self-contained line reader. More or less
+> a getline variant that can handle cursoring left and right to insert  
+> stuff, handle backspace past a wordwrap (which on unix requires
+> knowing the screen width and your current cursor position), and one
+> that lets up/down escape sequences be hooked for less/more screen
+> scrolling, vi line movement, shell command history, and so on.  
+
+Which is most of an editor already, so how to break it up into bite
+sized morsels?
+
+> There's sort of three levels here, the first is "parse raw input,  
+> assembling escape sequences into cursor-left and similar as
+> necessary". (That's the one I had to redo in busybox vi because they
+> didn't do it right.)
+> 
+> The second is "edit a line of text, handling cursoring _within_ the  
+> line". That's the better/interactive getline().
+> 
+> The third is handling escapes from that line triggering behavior in
+> the larger command (cursor up and cursor down do different things in
+> less, in vi, and in shell command history).
+> 
+> The fiddly bit is that terminal_size() sort of has to integrate with  
+> all of these. Possibly I need to have width and height be members of  
+> struct toy_context. Or have the better_getline() take a pointer to a  
+> state structure it can update, containing that info...
+
+*/
+
+
+static char *borderChars[][6] =
+{
+  {"-",    "|",    "+",    "+",    "+",    "+"},     // "stick" characters.
+  {"\xE2\x94\x80", "\xE2\x94\x82", "\xE2\x94\x8C", "\xE2\x94\x90", "\xE2\x94\x94", "\xE2\x94\x98"},  // UTF-8
+  {"\x71", "\x78", "\x6C", "\x6B", "\x6D", "\x6A"},  // VT100 alternate character set.
+  {"\xC4", "\xB3", "\xDA", "\xBF", "\xC0", "\xD9"}   // DOS
+};
+
+static char *borderCharsCurrent[][6] =
+{
+  {"=",    "#",    "+",    "+",    "+",    "+"},     // "stick" characters.
+  {"\xE2\x95\x90", "\xE2\x95\x91", "\xE2\x95\x94", "\xE2\x95\x97", "\xE2\x95\x9A", "\xE2\x95\x9D"},  // UTF-8
+  {"\x71", "\x78", "\x6C", "\x6B", "\x6D", "\x6A"},  // VT100 alternate character set has none of these.  B-(
+  {"\xCD", "\xBA", "\xC9", "\xBB", "\xC8", "\xBC"}   // DOS
+};
+
+
+typedef struct _box box;
+typedef struct _view view;
+
+typedef void (*boxFunction) (box *box);
+typedef void (*eventHandler) (view *view);
+
+struct function
+{
+  char *name;           // Name for script purposes.
+  char *description;    // Human name for the menus.
+  char type;
+  union
+  {
+    eventHandler handler;
+    char *scriptCallback;
+  };
+};
+
+struct keyCommand
+{
+  char *key, *command;
+};
+
+struct item
+{
+  char *text;           // What's shown to humans.
+  struct key *key;      // Shortcut key while the menu is displayed.
+    // If there happens to be a key bound to the same command, the menu system should find that and show it to.
+  char type;
+  union
+  {
+    char *command;
+    struct item *items; // An array of next level menu items.
+  };
+};
+
+struct borderWidget
+{
+  char *text, *command;
+};
+
+// TODO - a generic "part of text", and what is used to define them.
+// For instance - word, line, paragraph, section.
+// Each context can have a collection of these.
+
+struct mode
+{
+  struct keyCommand *keys;      // An array of key to command mappings.
+  struct item *items;           // An array of top level menu items.
+  struct item *functionKeys;    // An array of single level "menus".  Used to show key commands.
+  uint8_t flags;                // commandMode.
+};
+
+/*
+Have a common menu up the top.
+  MC has a menu that changes per mode.
+  Nano has no menu.
+Have a common display of certain keys down the bottom.
+  MC is one row of F1 to F10, but changes for edit / view / file browse.  But those are contexts here.
+  Nano is 12 random Ctrl keys, possibly in two lines, that changes depending on the editor mode, like editing the prompt line for various reasons, help.
+*/
+struct context                  // Defines a context for content.  Text viewer, editor, file browser for instance.
+{
+  struct function *commands;    // The master list, the ones pointed to by the menus etc should be in this list.
+  struct mode *modes;           // A possible empty array of modes, indexed by the view.
+    // OR might be better to have these as a linked list, so that things like Emacs can have it's mode keymap hierarcy.
+  eventHandler handler;         // TODO - Might be better to put this in the modes.  I think vi will need that.
+    // Should set the damage list if it needs a redraw, and flags if border or status line needs updating.
+    // Keyboard / mouse events if the box did not handle them itself.
+    // DrawAll event for when drawing the box for the first time, on reveals for coming out of full screen, or user hit the redraw key.
+    // Scroll event if the content wants to handle that itself.
+    // Timer event for things like top that might want to have this called regularly.
+  boxFunction doneRedraw;       // The box is done with it's redraw, so we can free the damage list or whatever now.
+  boxFunction delete;
+    // This can be used as the sub struct for various context types.  Like viewer, editor, file browser, top, etc.
+    // Could even be an object hierarchy, like generic editor, which Basic vi inherits from.
+    //   Or not, since the commands might be different / more of them.
+};
+
+// TODO - might be better off just having a general purpose "widget" which includes details of where it gets attached.
+// Status lines can have them to.
+struct border
+{
+  struct borderWidget *topLeft, *topMiddle, *topRight;
+  struct borderWidget *bottomLeft, *bottomMiddle, *bottomRight;
+  struct borderWidget *left, *right;
+};
+
+struct line
+{
+  struct line *next, *prev;
+  uint32_t length;      // Careful, this is the length of the allocated memory for real lines, but the number of lines in the header node.
+  char *line;           // Should be blank for the header.
+};
+
+struct damage
+{
+  struct damage *next;  // A list for faster draws?
+  uint16_t X, Y, W, H;  // The rectangle to be redrawn.
+  uint16_t offset;      // Offest from the left for showing lines.
+  struct line *lines;   // Pointer to a list of text lines, or NULL.
+    // Note - likely a pointer into the middle of the line list in a content.
+};
+
+struct content          // For various instances of context types.  
+    // Editor / text viewer might have several files open, so one of these per file.
+    // MC might have several directories open, one of these per directory.  No idea why you might want to do this.  lol
+{
+  struct context *context;
+  char *name, *file, *path;
+  struct line lines;
+//  file type
+//  double linked list of bookmarks, pointer to line, character position, length (or ending position?), type, blob for types to keep context.
+  uint16_t minW, minH, maxW, maxH;
+  uint8_t flags;        // readOnly, modified.
+    // This can be used as the sub struct for various content types.
+};
+
+struct _view
+{
+  struct content *content;
+  box *box;
+  struct border *border;        // Can be NULL.
+  char *statusLine;             // Text of the status line, or NULL if none.
+  int mode;                     // For those contexts that can be modal.  Normally used to index the keys, menus, and key displays.
+  struct damage *damage;        // Can be NULL.  If not NULL after context->doneRedraw(), box will free it and it's children.
+    // TODO - Gotta be careful of overlapping views.
+  void *data;                   // The context controls this blob, it's specific to each box.
+  uint32_t offsetX, offsetY;    // Offset within the content, coz box handles scrolling, usually.
+  uint16_t X, Y, W, H;          // Position and size of the content area within the box.  Calculated, but cached coz that might be needed for speed.
+  uint16_t cX, cY;              // Cursor position within the content.
+  uint16_t iX, oW;              // Cursor position inside the lines input text, in case the formatter makes it different, and output length.
+  char *output;                 // The current line formatted for output.
+  uint8_t flags;                // redrawStatus, redrawBorder;
+
+  // Assumption is that each box has it's own editLine (likely the line being edited), or that there's a box that is just the editLine (emacs minibuffer, and command lines for other proggies).
+  struct line *line;            // Pointer to the current line, might be the only line.
+  char *prompt;                 // Optional prompt for the editLine.
+
+// Display mode / format hook.
+// view specific bookmarks, including highlighted block and it's type.
+// Linked list of selected lines for a filtered view, or processing only those lines.
+// Linked list of pointers to struct keyCommand, for emacs keymaps hierarchy, and anything similar in other editors.  Plus some way of dealing with emacs minor mode keymaps.
+};
+
+struct _box
+{
+  box *sub1, *sub2, *parent;
+  view *view;                   // This boxes view into it's content.  For sharing contents, like a split pane editor for instance, there might be more than one box with this content, but a different view.
+    // If it's just a parent box, it wont have this, so just make it a damn pointer, that's the simplest thing.  lol
+    // TODO - Are parent boxes getting a view anyway?
+  uint16_t X, Y, W, H;          // Position and size of the box itself, not the content.  Calculated, but cached coz that might be needed for speed.
+  float split;                  // Ratio of sub1's part of the split, the sub2 box gets the rest.
+  uint8_t flags;                // Various flags.
+};
+
+
+// Sometimes you just can't avoid circular definitions.
+void drawBox(box *box);
+
+
+#define BOX_HSPLIT  1   // Marks if it's a horizontally or vertically split.
+#define BOX_BORDER  2   // Mark if it has a border, often full screen boxes wont.
+
+static int overWriteMode;
+static box *rootBox;    // Parent of the rest of the boxes, or the only box.  Always a full screen.
+static box *currentBox;
+static view *commandLine;
+static int commandMode;
+
+#define MEM_SIZE  128   // Chunk size for line memory allocation.
+
+// Inserts the line after the given line, or at the end of content if no line.
+struct line *addLine(struct content *content, struct line *line, char *text, uint32_t length)
+{
+  struct line *result = NULL;
+  uint32_t len;
+
+  if (!length)
+    length = strlen(text);
+  // Round length up.
+  len = (((length + 1) / MEM_SIZE) + 1) * MEM_SIZE;
+  result = xzalloc(sizeof(struct line));
+  result->line = xzalloc(len);
+  result->length = len;
+  strncpy(result->line, text, length);
+
+  if (content)
+  {
+    if (!line)
+      line = content->lines.prev;
+
+    result->next = line->next;
+    result->prev = line;
+
+    line->next->prev = result;
+    line->next = result;
+
+    content->lines.length++;
+  }
+  else
+  {
+    result->next = result;
+    result->prev = result;
+  }
+
+  return result;
+}
+
+void freeLine(struct content *content, struct line *line)
+{
+  line->next->prev = line->prev;
+  line->prev->next = line->next;
+  if (content)
+    content->lines.length--;
+  free(line->line);
+  free(line);
+}
+
+void loadFile(struct content *content)
+{
+  int fd = open(content->path, O_RDONLY);
+
+  if (-1 != fd)
+  {
+    char *temp = NULL;
+    long len = 0;
+
+    do
+    {
+      // TODO - get_line() is slow, and wont help much with DOS and Mac line endings.
+      temp = get_line(fd);
+      if (temp)
+        addLine(content, NULL, temp, len);
+    } while (temp);
+    close(fd);
+  }
+}
+
+// TODO - load and save should be able to deal with pipes, and with loading only parts of files, to load more parts later.
+
+void saveFile(struct content *content)
+{
+// TODO - Should do "Save as" as well.  Which is just a matter of changing content->path before calling this.
+  int fd;
+
+  fd = open(content->path, O_WRONLY | O_CREAT | O_TRUNC, S_IRUSR | S_IWUSR | S_IRGRP | S_IWGRP | S_IROTH);
+
+  if (-1 != fd)
+  {
+    struct line *line = content->lines.next;
+
+    while (&(content->lines) != line)  // We are at the end if we have wrapped to the beginning.
+    {
+      write(fd, line->line, strlen(line->line));
+      write(fd, "\n", 1);
+      line = line->next;
+    }
+    close(fd);
+  }
+  else
+  {
+    fprintf(stderr, "Can't open file %s\n", content->path);
+    exit(1);
+  }
+}
+
+struct content *addContent(char *name, struct context *context, char *filePath)
+{
+  struct content *result  = xzalloc(sizeof(struct content));
+
+  result->lines.next  = &(result->lines);
+  result->lines.prev  = &(result->lines);
+  result->name    = strdup(name);
+  result->context    = context;
+
+  if (filePath)
+  {
+    result->path = strdup(filePath);
+    loadFile(result);
+  }
+
+  return result;
+}
+
+// General purpose line moosher.  Used for appends, inserts, overwrites, and deletes.
+// TODO - should have the same semantics as mooshStrings, only it deals with whole lines in double linked lists.
+// We need content so we can adjust it's number of lines if needed.
+void mooshLines(struct content *content, struct line *result, struct line *moosh, uint16_t index, uint16_t length, int insert)
+{
+}
+
+// General purpose string moosher.  Used for appends, inserts, overwrites, and deletes.
+void mooshStrings(struct line *result, char *moosh, uint16_t index, uint16_t length, int insert)
+{
+  char *c, *pos;
+  int limit = strlen(result->line);
+  int mooshLen = 0, resultLen;
+
+  if (moosh)
+    mooshLen = strlen(moosh);
+
+  /*
+   * moosh  == NULL  a deletion
+   * length == 0    simple insertion
+   * length <  mooshlen  delete some, insert moosh
+   * length == mooshlen  exact overwrite.
+   * length >  mooshlen  delete a lot, insert moosh
+   */
+
+  mooshLen -= length;
+  resultLen = limit + mooshLen;
+
+  // If we need more space, allocate more.
+  if (resultLen > result->length)
+  {
+    result->length = resultLen + MEM_SIZE;
+    result->line = xrealloc(result->line, result->length);
+  }
+
+  if (limit <= index)  // At end, just add to end.
+  {
+    // TODO - Possibly add spaces to pad out to where index is?
+    //          Would be needed for "go beyond end of line" and "column blocks".
+    //          Both of those are advanced editing.
+    index = limit;
+    insert = 1;
+  }
+
+  pos = &(result->line[index]);
+
+  if (insert)  // Insert / delete before current character, so move it and the rest up / down mooshLen bytes.
+  {
+    if (0 < mooshLen)  // Gotta move things up.
+    {
+      c = &(result->line[limit]);
+      while (c >= pos)
+      {
+        *(c + mooshLen) = *c;
+        c--;
+      }
+    }
+    else if (0 > mooshLen)  // Gotta move things down.
+    {
+      c = pos;
+      while (*c)
+      {
+        *c = *(c - mooshLen);  // A double negative.
+        c++;
+      }
+    }
+  }
+
+  if (moosh)
+  {
+    c = moosh;
+    do
+    {
+      *pos++ = *c++;
+    }
+    while (*c);
+  }
+}
+
+// TODO - Should draw the current border in green, the text as default (or highlight / bright).
+//          Then allow one other box to be red bordered (MC / dired destination box).
+//          All other boxes with dark gray border, and dim text.
+void drawLine(int y, int start, int end, char *left, char *internal, char *contents, char *right, int current)
+{
+  int size = strlen(internal);
+  int len = (end - start) * size, x = 0;
+  char line[len + 1];
+
+  if ('\0' != left[0])  // Assumes that if one side has a border, then so does the other.
+    len -= 2 * size;
+
+  if (contents)
+  {
+    // strncpy wont add a null at the end if the source is longer, but will pad with nulls if source is shorter.
+    // So it's best to put a safety null in first.
+    line[len] = '\0';
+    strncpy(line, contents, len);
+    // Make sure the following while loop pads out line with the internal character.
+    x = strlen(line);
+  }
+  while (x < len)
+  {
+    strcpy(&line[x], internal);
+    x += size;
+  }
+  line[x++] = '\0';
+  if ('\0' == left[0])  // Assumes that if one side has a border, then so does the other.
+  {
+    if (current)
+      printf("\x1B[1m\x1B[%d;%dH%s\x1B[m", y + 1, start + 1, line);
+    else
+      printf("\x1B[m\x1B[%d;%dH%s", y + 1, start + 1, line);
+  }
+  else
+  {
+    if (current)
+      printf("\x1B[1m\x1B[%d;%dH%s%s%s\x1B[m", y + 1, start + 1, left, line, right);
+    else
+      printf("\x1B[m\x1B[%d;%dH%s%s%s", y + 1, start + 1, left, line, right);
+  }
+}
+
+void formatCheckCursor(view *view, long *cX, long *cY, char *input)
+{
+  int i = 0, o = 0, direction = (*cX) - view->cX;
+
+  // Adjust the cursor if needed, depending on the contents of the line, and the direction of travel.
+  while (input[i])
+  {
+    // When o is equal to the cX position, update the iX position to be where i is.
+    if ('\t' == input[i])
+    {
+      int j = 8 - (i % 8);
+
+      // Check if the cursor is in the middle of the tab.
+      if (((*cX) > o) && ((*cX) < (o + j)))
+      {
+        if (0 <= direction)
+        {
+          *cX = (o + j);
+          view->iX = i + 1;
+        }
+        else
+        {
+          *cX = o;
+          view->iX = i;
+        }
+      }
+      o += j;
+    }
+    else
+    {
+      if ((*cX) == o)
+        view->iX = i;
+      o++;
+    }
+    i++;
+  }
+  // One more check in case the cursor is at the end of the line.
+  if ((*cX) == o)
+    view->iX = i;
+}
+
+// TODO - Should convert control characters to reverse video, and deal with UTF8.
+
+/* FIXME - We get passed a NULL input, apparently when the file length is close to the screen length. -
+> On Thu, 6 Sep 2012 11:56:17 +0800 Roy Tam <roytam@gmail.com> wrote:
+>   
+> > 2012/9/6 David Seikel <onefang@gmail.com>:  
+> > >> Program received signal SIGSEGV, Segmentation fault.
+> > >> formatLine (view=0x8069168, input=0x0, output=0x806919c)
+> > >>     at toys/other/boxes.c:843
+> > >> 843        int len = strlen(input), i = 0, o = 0;
+> > >> (gdb) bt
+> > >> #0  formatLine (view=0x8069168, input=0x0, output=0x806919c)
+> > >>     at toys/other/boxes.c:843
+> > >> #1  0x0804f1dd in moveCursorAbsolute (view=0x8069168, cX=0,
+> > >> cY=10, sX=0, sY=0) at toys/other/boxes.c:951
+> > >> #2  0x0804f367 in moveCursorRelative (view=0x8069168, cX=0,
+> > >> cY=10, sX=0, sY=0) at toys/other/boxes.c:1011
+> > >> #3  0x0804f479 in upLine (view=0x8069168, event=0x0) at
+> > >> toys/other/boxes.c:1442 #4  0x0804fb63 in handleKey
+> > >> (view=0x8069168, i=2, keyName=<optimized out>, buffer=0xbffffad8
+> > >> "\033[A") at toys/other/boxes.c:1593 #5  0x0805008d in editLine
+> > >> (view=0x8069168, X=-1, Y=-1, W=-1, H=-1) at
+> > >> toys/other/boxes.c:1785 #6  0x08050288 in boxes_main () at
+> > >> toys/other/boxes.c:2482 #7  0x0804b262 in toy_exec
+> > >> (argv=0xbffffd58) at main.c:104 #8  0x0804b29d in toybox_main ()
+> > >> at main.c:118 #9  0x0804b262 in toy_exec (argv=0xbffffd54) at
+> > >> main.c:104 #10 0x0804b29d in toybox_main () at main.c:118
+> > >> #11 0x0804affa in main (argc=5, argv=0xbffffd54) at main.c:159  
+> > >
+> > > No segfault here when I try that, nor with different files.  As I
+> > > said, it has bugs.  I have seen other cases before when NULL lines
+> > > are passed around near that code.  Guess I've not got them all.
+> > > Might help to mention what terminal proggy you are using, it's
+> > > size in characters, toybox version, OS, etc.  Something is
+> > > different between you and me.  
+> > 
+> > Terminal Program: PuTTY
+> > Windows size: 80 * 25 chars
+> > Toybox version: hg head
+> > OS: Linux 3.2 (Debian wheezy)
+> > File: Toybox LICENSE file  
+> 
+> I'll install PuTTY, try toybox hg head, and play with them later, see
+> if I can reproduce that segfault.  I use the last released tarball of
+> toybox, an old Ubuntu, and a bunch of other terminal proggies.  I did
+> not know that PuTTY had been ported to Unix.
+> 
+> But as I mentioned, not interested in a bug hunt right now.  That will
+> be more appropriate when it's less of a "sandbox for testing the
+> ideas" and more of a "good enough to bother using".  Always good to
+> have other terminals for testing though.  
+
+Seems to be sensitive to the number of lines.  On my usual huge
+roxterm, using either toybox 0.4 or hg head, doing this -
+
+./toybox boxes -m less LICENSE -h 25
+
+and just hitting down arrow until you get to the bottom of the page
+segfaults as well.  -h means "pretend the terminal is that many lines
+high", there's a similar -w as well.  80x25 in any other terminal did
+the same.  For that particular file (17 lines long), any value of -h
+between 19 and 34 will segfault after some moving around.  -h 35 makes
+it segfault straight away.  Less than 19 or over 35 is fine.  Longer
+files don't have that problem, though I suspect it will happen on
+shortish files where the number of lines is about the length of the
+screen.
+
+I guess that somewhere I'm doing maths wrong and getting an out of
+bounds line number when the file length is close to the screen length.
+I'll make note of that, and fix it when I next get time to beat on
+boxes.
+
+Thanks for reporting it Roy.
+*/
+
+int formatLine(view *view, char *input, char **output)
+{
+  int len = strlen(input), i = 0, o = 0;
+
+  *output = xrealloc(*output, len + 1);
+
+  while (input[i])
+  {
+    if ('\t' == input[i])
+    {
+      int j = 8 - (i % 8);
+
+      *output = xrealloc(*output, len + j + 1);
+      for (; j; j--)
+      {
+        (*output)[o++] = ' ';
+        len++;
+      }
+      len--;  // Not counting the actual tab character itself.
+    }
+    else
+      (*output)[o++] = input[i];
+    i++;
+  }
+  (*output)[o++] = '\0';
+
+  return len;
+}
+
+void drawContentLine(view *view, int y, int start, int end, char *left, char *internal, char *contents, char *right, int current)
+{
+  char *temp = NULL;
+  int offset = view->offsetX, len;
+
+  if (contents == view->line->line)
+  {
+    view->oW = formatLine(view, contents, &(view->output));
+    temp = view->output;
+    len = view->oW;
+  }
+  else  // Only time we are not drawing the current line, and only used for drawing the entire page.
+    len = formatLine(NULL, contents, &(temp));
+
+  if (offset > len)
+    offset = len;
+  drawLine(y, start, end, left, internal, &(temp[offset]), right, current);
+}
+
+void updateLine(view *view)
+{
+  int y, len;
+
+  // Coz things might change out from under us, find the current view.  Again.
+  if (commandMode)      view = commandLine;
+  else          view = currentBox->view;
+
+  // TODO - When doing scripts and such, might want to turn off the line update until finished.
+  // Draw the prompt and the current line.
+  y = view->Y + (view->cY - view->offsetY);
+  len = strlen(view->prompt);
+  drawLine(y, view->X, view->X + view->W, "", " ", view->prompt, "", 0);
+  drawContentLine(view, y, view->X + len, view->X + view->W, "", " ", view->line->line, "", 1);
+  // Move the cursor.
+  printf("\x1B[%d;%dH", y + 1, view->X + len + (view->cX - view->offsetX) + 1);
+  fflush(stdout);
+}
+
+void doCommand(view *view, char *command)
+{
+  if (command)
+  {
+    struct function *functions = view->content->context->commands;
+    int i;
+
+// TODO - Some editors have a shortcut command concept.  The smallest unique first part of each command will match, as well as anything longer.
+//          A further complication is if we are not implementing some commands that might change what is "shortest unique prefix".
+
+    for (i = 0; functions[i].name; i++)
+    {
+      if (strcmp(functions[i].name, command) == 0)
+      {
+        if (functions[i].handler)
+        {
+          functions[i].handler(view);
+          updateLine(view);
+        }
+        break;
+      }
+    }
+  }
+}
+
+int moveCursorAbsolute(view *view, long cX, long cY, long sX, long sY)
+{
+  struct line *newLine = view->line;
+  long oX = view->offsetX, oY = view->offsetY;
+  long lX = view->oW, lY = view->content->lines.length - 1;
+  long nY = view->cY;
+  uint16_t w = view->W - 1, h = view->H - 1;
+  int moved = 0, updatedY = 0, endOfLine = 0;
+
+  // Check if it's still within the contents.
+  if (0 > cY)    // Trying to move before the beginning of the content.
+    cY = 0;
+  else if (lY < cY)  // Trying to move beyond end of the content.
+    cY = lY;
+  if (0 > cX)    // Trying to move before the beginning of the line.
+  {
+    // See if we can move to the end of the previous line.
+    if (view->line->prev != &(view->content->lines))
+    {
+      cY--;
+      endOfLine = 1;
+    }
+    else
+      cX = 0;
+  }
+  else if (lX < cX)  // Trying to move beyond end of line.
+  {
+    // See if we can move to the begining of the next line.
+    if (view->line->next != &(view->content->lines))
+    {
+      cY++;
+      cX = 0;
+    }
+    else
+      cX = lX;
+  }
+
+  // Find the new line.
+  while (nY != cY)
+  {
+    updatedY = 1;
+    if (nY < cY)
+    {
+      newLine = newLine->next;
+      nY++;
+      if (view->content->lines.prev == newLine)  // We are at the end if we have wrapped to the beginning.
+        break;
+    }
+    else
+    {
+      newLine = newLine->prev;
+      nY--;
+      if (view->content->lines.next == newLine)  // We are at the end if we have wrapped to the beginning.
+        break;
+    }
+  }
+  cY = nY;
+
+  // Check if we have moved past the end of the new line.
+  if (updatedY)
+  {
+    // Format it.
+    view->oW = formatLine(view, newLine->line, &(view->output));
+    if (view->oW < cX)
+      endOfLine = 1;
+    if (endOfLine)
+      cX = view->oW;
+  }
+
+  // Let the formatter decide if it wants to adjust things.
+  // It's up to the formatter to deal with things if it changes cY.
+  // On the other hand, changing cX is it's job.
+  formatCheckCursor(view, &cX, &cY, newLine->line);
+
+  // Check the scrolling.
+  lY -= view->H - 1;
+  oX += sX;
+  oY += sY;
+
+  if (oY > cY)      // Trying to move above the box.
+    oY += cY - oY;
+  else if ((oY + h) < cY)    // Trying to move below the box
+    oY += cY - (oY + h);
+  if (oX > cX)      // Trying to move to the left of the box.
+    oX += cX - oX;
+  else if ((oX + w) <= cX)  // Trying to move to the right of the box.
+    oX += cX - (oX + w);
+
+  if (oY < 0)
+    oY = 0;
+  if (oY >= lY)
+    oY = lY;
+  if (oX < 0)
+    oX = 0;
+  // TODO - Should limit oX to less than the longest line, minus box width.
+  //          Gonna be a pain figuring out what the longest line is.
+  //          On the other hand, don't think that will be an actual issue unless "move past end of line" is enabled, and that's an advanced editor thing.
+  //          Though still might want to do that for the longest line on the new page to be.
+
+  if ((view->cX != cX) || (view->cY != cY))
+    moved = 1;
+
+  // Actually update stuff, though some have been done already.
+  view->cX = cX;
+  view->cY = cY;
+  view->line = newLine;
+
+  // Handle scrolling.
+  if ((view->offsetX != oX) || (view->offsetY != oY))
+  {
+    view->offsetX = oX;
+    view->offsetY = oY;
+
+    if (view->box)
+      drawBox(view->box);
+  }
+
+  return moved;
+}
+
+int moveCursorRelative(view *view, long cX, long cY, long sX, long sY)
+{
+  return moveCursorAbsolute(view, view->cX + cX, view->cY + cY, sX, sY);
+}
+
+void sizeViewToBox(box *box, int X, int Y, int W, int H)
+{
+  uint16_t one = 1, two = 2;
+
+  if (!(box->flags & BOX_BORDER))
+  {
+      one = 0;
+      two = 0;
+  }
+  box->view->X = X;
+  box->view->Y = Y;
+  box->view->W = W;
+  box->view->H = H;
+  if (0 > X)  box->view->X = box->X + one;
+  if (0 > Y)  box->view->Y = box->Y + one;
+  if (0 > W)  box->view->W = box->W - two;
+  if (0 > H)  box->view->H = box->H - two;
+}
+
+view *addView(char *name, struct context *context, char *filePath, uint16_t X, uint16_t Y, uint16_t W, uint16_t H)
+{
+  view *result = xzalloc(sizeof(struct _view));
+
+  result->X = X;
+  result->Y = Y;
+  result->W = W;
+  result->H = H;
+
+  result->content = addContent(name, context, filePath);
+  result->prompt = xzalloc(1);
+  // If there was content, format it's first line as usual, otherwise create an empty first line.
+  if (result->content->lines.next != &(result->content->lines))
+  {
+    result->line = result->content->lines.next;
+    result->oW = formatLine(result, result->line->line, &(result->output));
+  }
+  else
+  {
+    result->line = addLine(result->content, NULL, "\0", 0);
+    result->output = xzalloc(1);
+  }
+
+  return result;
+}
+
+box *addBox(char *name, struct context *context, char *filePath, uint16_t X, uint16_t Y, uint16_t W, uint16_t H)
+{
+  box *result = xzalloc(sizeof(struct _box));
+
+  result->X = X;
+  result->Y = Y;
+  result->W = W;
+  result->H = H;
+  result->view = addView(name, context, filePath, X, Y, W, H);
+  result->view->box = result;
+  sizeViewToBox(result, X, Y, W, H);
+
+  return result;
+}
+
+void freeBox(box *box)
+{
+  if (box)
+  {
+    freeBox(box->sub1);
+    freeBox(box->sub2);
+    if (box->view)
+    {
+      // In theory the line should not be part of the content if there is no content, so we should free it.
+      if (!box->view->content)
+        freeLine(NULL, box->view->line);
+      free(box->view->prompt);
+      free(box->view->output);
+      free(box->view);
+    }
+    free(box);
+  }
+}
+
+void drawBox(box *box)
+{
+  // This could be heavily optimized, but let's keep things simple for now.
+  // Optimized for sending less characters I mean, on slow serial links for instance.
+
+  char **bchars = (toys.optflags & FLAG_a) ? borderChars[0] : borderChars[1];
+  char *left = "\0", *right = "\0";
+  struct line *lines = NULL;
+  int y = box->Y, current = (box == currentBox);
+  uint16_t h = box->Y + box->H;
+
+  if (current)
+    bchars = (toys.optflags & FLAG_a) ? borderCharsCurrent[0] : borderCharsCurrent[1];
+
+  // Slow and laborious way to figure out where in the linked list of lines we start from.
+  // Wont scale well, but is simple.
+  if (box->view && box->view->content)
+  {
+    int i = box->view->offsetY;
+
+    lines = &(box->view->content->lines);
+    while (i--)
+    {
+      lines = lines->next;
+      if (&(box->view->content->lines) == lines)  // We are at the end if we have wrapped to the beginning.
+        break;
+    }
+  }
+
+  if (box->flags & BOX_BORDER)
+  {
+    h--;
+    left = right = bchars[1];
+    drawLine(y++, box->X, box->X + box->W, bchars[2], bchars[0], NULL, bchars[3], current);
+  }
+
+  while (y < h)
+  {
+    char *line = "";
+
+    if (lines)
+    {
+      lines = lines->next;
+      if (&(box->view->content->lines) == lines)  // We are at the end if we have wrapped to the beginning.
+        lines = NULL;
+      else
+        line = lines->line;
+      // Figure out which line is our current line while we are here.
+      if (box->view->Y + (box->view->cY - box->view->offsetY) == y)
+        box->view->line = lines;
+    }
+    drawContentLine(box->view, y++, box->X, box->X + box->W, left, " ", line, right, current);
+  }
+  if (box->flags & BOX_BORDER)
+    drawLine(y++, box->X, box->X + box->W, bchars[4], bchars[0], NULL, bchars[5], current);
+  fflush(stdout);
+}
+
+void drawBoxes(box *box)
+{
+  if (box->sub1)  // If there's one sub box, there's always two.
+  {
+    drawBoxes(box->sub1);
+    drawBoxes(box->sub2);
+  }
+  else
+    drawBox(box);
+}
+
+void calcBoxes(box *box)
+{
+  if (box->sub1)  // If there's one sub box, there's always two.
+  {
+    box->sub1->X = box->X;
+    box->sub1->Y = box->Y;
+    box->sub1->W = box->W;
+    box->sub1->H = box->H;
+    box->sub2->X = box->X;
+    box->sub2->Y = box->Y;
+    box->sub2->W = box->W;
+    box->sub2->H = box->H;
+    if (box->flags & BOX_HSPLIT)
+    {
+      box->sub1->H *= box->split;
+      box->sub2->H -= box->sub1->H;
+      box->sub2->Y += box->sub1->H;
+    }
+    else
+    {
+      box->sub1->W *= box->split;
+      box->sub2->W -= box->sub1->W;
+      box->sub2->X += box->sub1->W;
+    }
+    sizeViewToBox(box->sub1, -1, -1, -1, -1);
+    calcBoxes(box->sub1);
+    sizeViewToBox(box->sub2, -1, -1, -1, -1);
+    calcBoxes(box->sub2);
+  }
+  // Move the cursor to where it is, to check it's not now outside the box.
+  moveCursorAbsolute(box->view, box->view->cX, box->view->cY, 0, 0);
+
+  // We could call drawBoxes() here, but this is recursive, and so is drawBoxes().
+  // The combination might be deadly.  Drawing the content of a box might be an expensive operation.
+  // Later we might use a dirty box flag to deal with this, if it's not too much of a complication.
+}
+
+void deleteBox(view *view)
+{
+  box *box = view->box;
+
+  if (box->parent)
+  {
+    struct _box *oldBox = box, *otherBox = box->parent->sub1;
+
+    if (otherBox == oldBox)
+      otherBox = box->parent->sub2;
+    if (currentBox->parent == box->parent)
+      currentBox = box->parent;
+    box = box->parent;
+    box->X = box->sub1->X;
+    box->Y = box->sub1->Y;
+    if (box->flags & BOX_HSPLIT)
+      box->H = box->sub1->H + box->sub2->H;
+    else
+      box->W = box->sub1->W + box->sub2->W;
+    box->flags &= ~BOX_HSPLIT;
+    // Move the other sub boxes contents up to this box.
+    box->sub1 = otherBox->sub1;
+    box->sub2 = otherBox->sub2;
+    if (box->sub1)
+    {
+        box->sub1->parent = box;
+        box->sub2->parent = box;
+        box->flags = otherBox->flags;
+        if (currentBox == box)
+          currentBox = box->sub1;
+    }
+    else
+    {
+      if (!box->parent)
+        box->flags &= ~BOX_BORDER;
+      box->split = 1.0;
+    }
+    otherBox->sub1 = NULL;
+    otherBox->sub2 = NULL;
+    // Safe to free the boxes now that we have all their contents.
+    freeBox(otherBox);
+    freeBox(oldBox);
+  }
+  // Otherwise it must be a single full screen box.  Never delete that one, unless we are quitting.
+
+  // Start the recursive recalculation of all the sub boxes.
+  calcBoxes(box);
+  drawBoxes(box);
+}
+
+void cloneBox(struct _box *box, struct _box *sub)
+{
+  sub->parent = box;
+  // Only a full screen box has no border.
+  sub->flags |= BOX_BORDER;
+  sub->view = xmalloc(sizeof(struct _view));
+  // TODO - After this is more stable, should check if the memcpy() is simpler than - xzalloc() then copy a few things manually.
+  //          Might even be able to arrange the structure so we can memcpy just part of it, leaving the rest blank.
+  memcpy(sub->view, box->view, sizeof(struct _view));
+  sub->view->damage = NULL;
+  sub->view->data = NULL;
+  sub->view->output = NULL;
+  sub->view->box = sub;
+  if (box->view->prompt)
+    sub->view->prompt = strdup(box->view->prompt);
+}
+
+void splitBox(box *box, float split)
+{
+  uint16_t size;
+  int otherBox = 0;
+
+  // First some sanity checks.
+  if (0.0 > split)
+  {
+    // TODO - put this in the status line, or just silently fail.  Also, better message.  lol
+    fprintf(stderr, "User is crazy.\n");
+    return;
+  }
+  else if (1.0 <= split)  // User meant to unsplit, and it may already be split.
+  {
+    // Actually, this means that the OTHER sub box gets deleted.
+    if (box->parent)
+    {
+      if (box == box->parent->sub1)
+        deleteBox(box->parent->sub2->view);
+      else
+        deleteBox(box->parent->sub1->view);
+    }
+    return;
+  }
+  else if (0.0 < split)  // This is the normal case, so do nothing.
+  {
+  }
+  else      // User meant to delete this, zero split.
+  {
+      deleteBox(box->view);
+      return;
+  }
+  if (box->flags & BOX_HSPLIT)
+    size = box->H;
+  else
+    size = box->W;
+  if (6 > size)    // Is there room for 2 borders for each sub box and one character of content each?
+        // TODO - also should check the contents minimum size.
+        // No need to check the no border case, that's only for full screen.
+        // People using terminals smaller than 6 characters get what they deserve.
+  {
+    // TODO - put this in the status line, or just silently fail.
+    fprintf(stderr, "Box is too small to split.\n");
+    return;
+  }
+
+  // Note that a split box is actually three boxes.  The parent, which is not drawn, and the two subs, which are.
+  // Based on the assumption that there wont be lots of boxes, this keeps things simple.
+  // It's possible that the box has already been split, and this is called just to update the split.
+  box->split = split;
+  if (NULL == box->sub1)  // If not split already, do so.
+  {
+    box->sub1 = xzalloc(sizeof(struct _box));
+    box->sub2 = xzalloc(sizeof(struct _box));
+    cloneBox(box, box->sub1);
+    cloneBox(box, box->sub2);
+    if (box->flags & BOX_HSPLIT)
+    {
+      // Split the boxes in the middle of the content.
+      box->sub2->view->offsetY += (box->H * box->split) - 2;
+      // Figure out which sub box the cursor will be in, then update the cursor in the other box.
+      if (box->sub1->view->cY < box->sub2->view->offsetY)
+        box->sub2->view->cY = box->sub2->view->offsetY;
+      else
+      {
+        box->sub1->view->cY = box->sub2->view->offsetY - 1;
+        otherBox = 1;
+      }
+    }
+    else
+    {
+      // Split the boxes in the middle of the content.
+      box->sub2->view->offsetX += (box->W * box->split) - 2;
+      // Figure out which sub box the cursor will be in, then update the cursor in the other box.
+      if (box->sub1->view->cX < box->sub2->view->offsetX)
+        box->sub2->view->cX = box->sub2->view->offsetX;
+      else
+      {
+        box->sub1->view->cX = box->sub2->view->offsetX - 1;
+        otherBox = 1;
+      }
+    }
+  }
+
+  if ((currentBox == box) && (box->sub1))
+  {
+    if (otherBox)
+      currentBox = box->sub2;
+    else
+      currentBox = box->sub1;
+  }
+
+  // Start the recursive recalculation of all the sub boxes.
+  calcBoxes(box);
+  drawBoxes(box);
+}
+
+// TODO - Might be better to just have a double linked list of boxes, and traverse that instead.
+//          Except that leaves a problem when deleting boxes, could end up with a blank space.
+void switchBoxes(view *view)
+{
+  box *box = view->box;
+
+  // The assumption here is that box == currentBox.
+  struct _box *oldBox = currentBox;
+  struct _box *thisBox = box;
+  int backingUp = 0;
+
+  // Depth first traversal.
+  while ((oldBox == currentBox) && (thisBox->parent))
+  {
+    if (thisBox == thisBox->parent->sub1)
+    {
+      if (backingUp && (thisBox->parent))
+        currentBox = thisBox->parent->sub2;
+      else if (thisBox->sub1)
+        currentBox = thisBox->sub1;
+      else
+        currentBox = thisBox->parent->sub2;
+    }
+    else if (thisBox == thisBox->parent->sub2)
+    {
+      thisBox = thisBox->parent;
+      backingUp = 1;
+    }
+  }
+
+  // If we have not found the next box to move to, move back to the beginning.
+  if (oldBox == currentBox)
+    currentBox = rootBox;
+
+  // If we ended up on a parent box, go to it's first sub.
+  while (currentBox->sub1)
+    currentBox = currentBox->sub1;
+
+  // Just redraw them all.
+  drawBoxes(rootBox);
+}
+
+// TODO - It might be better to do away with this bunch of single line functions
+//        and map script commands directly to lower functions.
+//        How to deal with the various argument needs?
+//        Might be where we can re use the toybox argument stuff.
+
+void halveBoxHorizontally(view *view)
+{
+  view->box->flags |= BOX_HSPLIT;
+  splitBox(view->box, 0.5);
+}
+
+void halveBoxVertically(view *view)
+{
+  view->box->flags &= ~BOX_HSPLIT;
+  splitBox(view->box, 0.5);
+}
+
+void switchMode(view *view)
+{
+  currentBox->view->mode++;
+  // Assumes that modes will always have a key mapping, which I think is a safe bet.
+  if (NULL == currentBox->view->content->context->modes[currentBox->view->mode].keys)
+    currentBox->view->mode = 0;
+  commandMode = currentBox->view->content->context->modes[currentBox->view->mode].flags & 1;
+}
+
+void leftChar(view *view)
+{
+  moveCursorRelative(view, -1, 0, 0, 0);
+}
+
+void rightChar(view *view)
+{
+  moveCursorRelative(view, 1, 0, 0, 0);
+}
+
+void upLine(view *view)
+{
+  moveCursorRelative(view, 0, -1, 0, 0);
+}
+
+void downLine(view *view)
+{
+  moveCursorRelative(view, 0, 1, 0, 0);
+}
+
+void upPage(view *view)
+{
+  moveCursorRelative(view, 0, 0 - (view->H - 1), 0, 0 - (view->H - 1));
+}
+
+void downPage(view *view)
+{
+  moveCursorRelative(view, 0, view->H - 1, 0, view->H - 1);
+}
+
+void endOfLine(view *view)
+{
+  moveCursorAbsolute(view, strlen(view->prompt) + view->oW, view->cY, 0, 0);
+}
+
+void startOfLine(view *view)
+{
+  // TODO - add the advanced editing "smart home".
+  moveCursorAbsolute(view, strlen(view->prompt), view->cY, 0, 0);
+}
+
+void splitLine(view *view)
+{
+  // TODO - should move this into mooshLines().
+  addLine(view->content, view->line, &(view->line->line[view->iX]), 0);
+  view->line->line[view->iX] = '\0';
+  moveCursorAbsolute(view, 0, view->cY + 1, 0, 0);
+  if (view->box)
+    drawBox(view->box);
+}
+
+void deleteChar(view *view)
+{
+  // TODO - should move this into mooshLines().
+  // If we are at the end of the line, then join this and the next line.
+  if (view->oW == view->cX)
+  {
+    // Only if there IS a next line.
+    if (&(view->content->lines) != view->line->next)
+    {
+      mooshStrings(view->line, view->line->next->line, view->iX, 1, !overWriteMode);
+      view->line->next->line = NULL;
+      freeLine(view->content, view->line->next);
+      // TODO - should check if we are on the last page, then deal with scrolling.
+      if (view->box)
+        drawBox(view->box);
+    }
+  }
+  else
+    mooshStrings(view->line, NULL, view->iX, 1, !overWriteMode);
+}
+
+void backSpaceChar(view *view)
+{
+  if (moveCursorRelative(view, -1, 0, 0, 0))
+    deleteChar(view);
+}
+
+void saveContent(view *view)
+{
+  saveFile(view->content);
+}
+
+void executeLine(view *view)
+{
+  struct line *result = view->line;
+
+  // Don't bother doing much if there's nothing on this line.
+  if (result->line[0])
+  {
+    doCommand(currentBox->view, result->line);
+    // If we are not at the end of the history contents.
+    if (&(view->content->lines) != result->next)
+    {
+      struct line *line = view->content->lines.prev;
+
+      // Remove the line first.
+      result->next->prev = result->prev;
+      result->prev->next = result->next;
+      // Check if the last line is already blank, then remove it.
+      if ('\0' == line->line[0])
+      {
+        freeLine(view->content, line);
+        line = view->content->lines.prev;
+      }
+      // Then add it to the end.
+      result->next = line->next;
+      result->prev = line;
+      line->next->prev = result;
+      line->next = result;
+      view->cY = view->content->lines.length - 1;
+    }
+    moveCursorAbsolute(view, 0, view->content->lines.length, 0, 0);
+    // Make sure there is one blank line at the end.
+    if ('\0' != view->line->line[0])
+    {
+      endOfLine(view);
+      splitLine(view);
+    }
+  }
+
+  saveFile(view->content);
+}
+
+void quit(view *view)
+{
+  handle_keys_quit();
+}
+
+void nop(view *view)
+{
+  // 'tis a nop, don't actually do anything.
+}
+
+
+typedef void (*CSIhandler) (long extra, int *code, int count);
+
+struct CSI
+{
+  char *code;
+  CSIhandler func;
+};
+
+static void termSize(long extra, int *params, int count)
+{
+  struct _view *view = (struct _view *) extra;          // Though we pretty much stomp on this straight away.
+  int r = params[0], c = params[1];
+
+  // The defaults are 1, which get ignored by the heuristic below.
+  // Check it's not an F3 key variation, coz some of them use the same CSI function code.
+  // This is a heuristic, we are checking against an unusable terminal size.
+  // TODO - Double check what the maximum F3 variations can be.
+  if ((2 == count) && (8 < r) && (8 < c))
+  {
+    commandLine->Y = r;
+    commandLine->W = c;
+    rootBox->W = c;
+    rootBox->H = r - 1;
+    sizeViewToBox(rootBox, -1, -1, -1, -1);
+    calcBoxes(rootBox);
+    drawBoxes(rootBox);
+
+    // Move the cursor to where it is, to check it's not now outside the terminal window.
+    moveCursorAbsolute(rootBox->view, rootBox->view->cX, rootBox->view->cY, 0, 0);
+
+    // We have no idea which is the current view now.
+    if (commandMode)    view = commandLine;
+    else                view = currentBox->view;
+    updateLine(view);
+  }
+}
+
+struct CSI CSIcommands[] =
+{
+  {"R", termSize}       // Parameters are cursor line and column.  Note this may be sent at other times, not just during terminal resize.
+};
+
+
+// Callback for incoming sequences from the terminal.
+static int handleEvent(long extra, struct keyevent *event)
+{
+  switch (event->type)
+  {
+    case HK_CSI :
+    {
+      int j;
+
+      for (j = 0; j < ARRAY_LEN(CSIcommands); j++)
+      {
+        if (strcmp(CSIcommands[j].code, event->sequence) == 0)
+        {
+          CSIcommands[j].func(extra, event->params, event->count);
+          break;
+        }
+      }
+      break;
+    }
+
+    case HK_KEYS :
+    {
+      struct _view *view = (struct _view *) extra;              // Though we pretty much stomp on this straight away.
+      struct keyCommand *commands = currentBox->view->content->context->modes[currentBox->view->mode].keys;
+      int j, l = strlen(event->sequence);
+
+      // Coz things might change out from under us, find the current view.
+      if (commandMode)  view = commandLine;
+      else              view = currentBox->view;
+
+      // Search for a key sequence bound to a command.
+      for (j = 0; commands[j].key; j++)
+      {
+        if (strncmp(commands[j].key, event->sequence, l) == 0)
+        {
+          // If it's a partial match, keep accumulating them.
+          if (strlen(commands[j].key) != l)
+            return 0;
+          else
+          {
+            doCommand(view, commands[j].command);
+            return 1;
+          }
+        }
+      }
+
+      // See if it's ordinary keys.
+      // NOTE - with vi style ordinary keys can be commands,
+      // but they would be found by the command check above first.
+      if (!event->isTranslated)
+      {
+        // TODO - Should check for tabs to, and insert them.
+        //        Though better off having a function for that?
+        mooshStrings(view->line, event->sequence, view->iX, 0, !overWriteMode);
+        view->oW = formatLine(view, view->line->line, &(view->output));
+        moveCursorRelative(view, strlen(event->sequence), 0, 0, 0);
+        updateLine(view);
+      }
+      break;
+    }
+
+    default :  break;
+  }
+
+  // Tell handle_keys to drop it, coz we dealt with it, or it's not one of ours.
+  return 1;
+}
+
+
+// The default command to function mappings, with help text.  Any editor that does not have it's own commands can use these for keystroke binding and such.
+// Though most of the editors have their own variation.
+// TODO - Maybe just use the joe one as default, it uses short names at least.
+//        Though vi is the only one in POSIX, so might be better to treat that one as the "standard" default.
+//        With some commands from others for stuff vi doesn't support.
+struct function simpleEditCommands[] =
+{
+  {"backSpaceChar",     "Back space last character.",           0, {backSpaceChar}},
+  {"deleteBox",         "Delete a box.",                        0, {deleteBox}},
+  {"deleteChar",        "Delete current character.",            0, {deleteChar}},
+  {"downLine",          "Move cursor down one line.",           0, {downLine}},
+  {"downPage",          "Move cursor down one page.",           0, {downPage}},
+  {"endOfLine",         "Go to end of line.",                   0, {endOfLine}},
+  {"executeLine",       "Execute a line as a script.",          0, {executeLine}},
+  {"leftChar",          "Move cursor left one character.",      0, {leftChar}},
+  {"quit",              "Quit the application.",                0, {quit}},
+  {"rightChar",         "Move cursor right one character.",     0, {rightChar}},
+  {"save",              "Save.",                                0, {saveContent}},
+  {"splitH",            "Split box in half horizontally.",      0, {halveBoxHorizontally}},
+  {"splitLine",         "Split line at cursor.",                0, {splitLine}},
+  {"splitV",            "Split box in half vertically.",        0, {halveBoxVertically}},
+  {"startOfLine",       "Go to start of line.",                 0, {startOfLine}},
+  {"switchBoxes",       "Switch to another box.",               0, {switchBoxes}},
+  {"switchMode",        "Switch between command and box.",      0, {switchMode}},
+  {"upLine",            "Move cursor up one line.",             0, {upLine}},
+  {"upPage",            "Move cursor up one page.",             0, {upPage}},
+  {NULL, NULL, 0, {NULL}}
+};
+
+// Construct a simple command line.
+
+// The key to command mappings.
+// TODO - Should not move off the ends of the line to the next / previous line.
+struct keyCommand simpleCommandKeys[] =
+{
+  {"BS",        "backSpaceChar"},
+  {"Del",       "deleteChar"},
+  {"Down",      "downLine"},
+  {"End",       "endOfLine"},
+  {"F10",       "quit"},
+  {"Home",      "startOfLine"},
+  {"Left",      "leftChar"},
+  {"Enter",     "executeLine"},
+  {"Return",    "executeLine"},
+  {"Right",     "rightChar"},
+  {"Esc",       "switchMode"},
+  {"Up",        "upLine"},
+  {NULL, NULL}
+};
+
+
+// Construct a simple emacs editor.
+
+// Mostly control keys, some meta keys.
+// Ctrl-h and Ctrl-x have more keys in the commands.  Some of those extra keys are commands by themselves.  Up to "Ctrl-x 4 Ctrl-g" which apparently is identical to just Ctrl-g.  shrugs
+//   Ctrl-h is backspace / del.  Pffft.
+// Meta key is either Alt-keystroke, Esc keystroke, or an actual Meta-keystroke (do they still exist?).
+//   TODO - Alt and Meta not supported yet, so using Esc.
+// Windows commands.
+
+// readline uses these same commands, and defaults to emacs keystrokes.
+struct function simpleEmacsCommands[] =
+{
+  {"delete-backward-char",      "Back space last character.",           0, {backSpaceChar}},
+  {"delete-window",             "Delete a box.",                        0, {deleteBox}},
+  {"delete-char",               "Delete current character.",            0, {deleteChar}},
+  {"next-line",                 "Move cursor down one line.",           0, {downLine}},
+  {"scroll-up",                 "Move cursor down one page.",           0, {downPage}},
+  {"end-of-line",               "Go to end of line.",                   0, {endOfLine}},
+  {"accept-line",               "Execute a line as a script.",          0, {executeLine}},              // From readline, which uses emacs commands, coz mg at least does not seem to have this.
+  {"backward-char",             "Move cursor left one character.",      0, {leftChar}},
+  {"save-buffers-kill-emacs",   "Quit the application.",                0, {quit}},                     // TODO - Does more than just quit.
+  {"forward-char",              "Move cursor right one character.",     0, {rightChar}},
+  {"save-buffer",               "Save.",                                0, {saveContent}},
+  {"split-window-horizontally", "Split box in half horizontally.",      0, {halveBoxHorizontally}},     // TODO - Making this one up for now, mg does not have it.
+  {"newline",                   "Split line at cursor.",                0, {splitLine}},
+  {"split-window-vertically",   "Split box in half vertically.",        0, {halveBoxVertically}},
+  {"beginning-of-line",         "Go to start of line.",                 0, {startOfLine}},
+  {"other-window",              "Switch to another box.",               0, {switchBoxes}},              // There is also "previous-window" for going in the other direction, which we don't support yet.
+  {"execute-extended-command",  "Switch between command and box.",      0, {switchMode}},               // Actually a one time invocation of the command line.
+  {"previous-line",             "Move cursor up one line.",             0, {upLine}},
+  {"scroll-down",               "Move cursor up one page.",             0, {upPage}},
+  {NULL, NULL, 0, {NULL}}
+};
+
+// The key to command mappings.
+struct keyCommand simpleEmacsKeys[] =
+{
+  {"BS",        "delete-backward-char"},
+  {"Del",       "delete-backward-char"},
+  {"^D",        "delete-char"},
+  {"Down",      "next-line"},
+  {"^N",        "next-line"},
+  {"End",       "end-of-line"},
+  {"^E",        "end-of-line"},
+  {"^X^C",      "save-buffers-kill-emacs"},
+  {"^X^S",      "save-buffer"},
+  {"Home",      "beginning-of-line"},
+  {"^A",        "beginning-of-line"},
+  {"Left",      "backward-char"},
+  {"^B",        "backward-char"},
+  {"PgDn",      "scroll-up"},
+  {"^V",        "scroll-up"},
+  {"PgUp",      "scroll-down"},
+  {"Escv",      "scroll-down"},                 // M-v
+  {"Enter",     "newline"},
+  {"Return",    "newline"},
+  {"Right",     "forward-char"},
+  {"^F",        "forward-char"},
+  {"Escx",      "execute-extended-command"},    // M-x
+  {"^X2",       "split-window-vertically"},
+  {"^XP",       "other-window"},
+  {"^X0",       "delete-window"},
+  {"Up",        "previous-line"},
+  {"^P",        "previous-line"},
+  {NULL, NULL}
+};
+
+struct keyCommand simpleEmacsCommandKeys[] =
+{
+  {"Del",       "delete-backwards-char"},
+  {"^D",        "delete-char"},
+  {"Down",      "next-line"},
+  {"^N",        "next-line"},
+  {"End",       "end-of-line"},
+  {"^E",        "end-of-line"},
+  {"Home",      "beginning-of-line"},
+  {"^A",        "beginning-of-line"},
+  {"Left",      "backward-char"},
+  {"^B",        "backward-char"},
+  {"Right",     "forward-char"},
+  {"^F",        "forward-char"},
+  {"Up",        "previous-line"},
+  {"^P",        "previous-line"},
+  {"Enter",     "accept-line"},
+  {"Return",    "accept-line"},
+  {"Escx",      "execute-extended-command"},
+  {NULL, NULL}
+};
+
+// An array of various modes.
+struct mode simpleEmacsMode[] =
+{
+  {simpleEmacsKeys, NULL, NULL, 0},
+  {simpleEmacsCommandKeys, NULL, NULL, 1},
+  {NULL, NULL, NULL}
+};
+
+// Put it all together into a simple editor context.
+struct context simpleEmacs =
+{
+  simpleEmacsCommands,
+  simpleEmacsMode,
+  NULL,
+  NULL,
+  NULL
+};
+
+
+// Construct a simple joe / wordstar editor, using joe is the reference, seems to be the popular Unix variant.
+// Esc x starts up the command line.
+// Has multi control key combos.  Mostly Ctrl-K, Ctrl-[ (Esc), (Ctrl-B, Ctrl-Q in wordstar and delphi), but might be others.
+//   Can't find a single list of command mappings for joe, gotta search all over.  sigh
+//   Even the command line keystroke I stumbled on (Esc x) is not documented.
+//   Note that you don't have to let go of the Ctrl key for the second keystroke, but you can.
+
+// From http://joe-editor.sourceforge.net/list.html
+// TODO - Some of these might be wrong.  Just going by the inadequate joe docs for now.
+struct function simpleJoeCommands[] =
+{
+  {"backs",     "Back space last character.",           0, {backSpaceChar}},
+  {"abort",     "Delete a box.",                        0, {deleteBox}},        // TODO - Should do quit if it's the last window.
+  {"delch",     "Delete current character.",            0, {deleteChar}},
+  {"dnarw",     "Move cursor down one line.",           0, {downLine}},
+  {"pgdn",      "Move cursor down one page.",           0, {downPage}},
+  {"eol",       "Go to end of line.",                   0, {endOfLine}},
+  {"ltarw",     "Move cursor left one character.",      0, {leftChar}},
+  {"killjoe",   "Quit the application.",                0, {quit}},
+  {"rtarw",     "Move cursor right one character.",     0, {rightChar}},
+  {"save",      "Save.",                                0, {saveContent}},
+  {"splitw",    "Split box in half horizontally.",      0, {halveBoxHorizontally}},
+  {"open",      "Split line at cursor.",                0, {splitLine}},
+  {"bol",       "Go to start of line.",                 0, {startOfLine}},
+  {"home",      "Go to start of line.",                 0, {startOfLine}},
+  {"nextw",     "Switch to another box.",               0, {switchBoxes}},      // This is "next window", there's also "previous window" which we don't support yet.
+  {"execmd",    "Switch between command and box.",      0, {switchMode}},       // Actually I think this just switches to the command mode, not back and forth.  Or it might execute the actual command.
+  {"uparw",     "Move cursor up one line.",             0, {upLine}},
+  {"pgup",      "Move cursor up one page.",             0, {upPage}},
+
+  // Not an actual joe command.
+  {"executeLine",       "Execute a line as a script.",  0, {executeLine}},      // Perhaps this should be execmd?
+  {NULL, NULL, 0, {NULL}}
+};
+
+struct keyCommand simpleJoeKeys[] =
+{
+  {"BS",        "backs"},
+  {"^D",        "delch"},
+  {"Down",      "dnarw"},
+  {"^N",        "dnarw"},
+  {"^E",        "eol"},
+  {"^C",        "killjoe"},
+  {"^Kd",       "save"},
+  {"^K^D"       "save"},
+  {"^A",        "bol"},
+  {"Left",      "ltarw"},
+  {"^B",        "ltarw"},
+  {"^V",        "pgdn"},        // Actually half a page.
+  {"^U",        "pgup"},        // Actually half a page.
+  {"Enter",     "open"},
+  {"Return",    "open"},
+  {"Right",     "rtarw"},
+  {"^F",        "rtarw"},
+  {"Escx",      "execmd"},
+  {"Esc^X",     "execmd"},
+  {"^Ko",       "splitw"},
+  {"^K^O",      "splitw"},
+  {"^Kn",       "nextw"},
+  {"^K^N",      "nextw"},
+  {"^Kx",       "killjoe"},     // TODO - Should ask if it should save if it's been modified.  A good generic thing to do anyway.
+  {"^K^X",      "abort"},       // TODO - These two both close a window, and quit if that was the last window.
+  {"Up",        "uparw"},
+  {"^P",        "uparw"},
+  {NULL, NULL}
+};
+
+struct keyCommand simpleJoeCommandKeys[] =
+{
+  {"BS",        "backs"},
+  {"^D",        "delch"},
+  {"Down",      "dnarw"},
+  {"^N",        "dnarw"},
+  {"^E",        "eol"},
+  {"^A",        "bol"},
+  {"Left",      "ltarw"},
+  {"^B",        "ltarw"},
+  {"Right",     "rtarw"},
+  {"^F",        "rtarw"},
+  {"Escx",      "execmd"},
+  {"Esc^X",     "execmd"},
+  {"Up",        "uparw"},
+  {"^P",        "uparw"},
+  {"Enter",     "executeLine"},
+  {"Return",    "executeLine"},
+  {NULL, NULL}
+};
+
+struct mode simpleJoeMode[] =
+{
+  {simpleJoeKeys, NULL, NULL, 0},
+  {simpleJoeCommandKeys, NULL, NULL, 1},
+  {NULL, NULL, NULL, 0}
+};
+
+struct context simpleJoe =
+{
+  simpleJoeCommands,
+  simpleJoeMode,
+  NULL,
+  NULL,
+  NULL
+};
+
+
+// Simple more and / or less.
+// '/' and '?' for search command mode.  I think they both have some ex commands with the usual : command mode starter.
+// No cursor movement, just scrolling.
+// TODO - Put content into read only mode.
+// TODO - actually implement read only mode where up and down one line do actual scrolling instead of cursor movement.
+
+struct keyCommand simpleLessKeys[] =
+{
+  {"Down",      "downLine"},
+  {"j",         "downLine"},
+  {"Enter",     "downLine"},
+  {"Return",    "downLine"},
+  {"End",       "endOfLine"},
+  {"q",         "quit"},
+  {":q",        "quit"},        // TODO - A vi ism, should do ex command stuff instead.
+  {"ZZ",        "quit"},
+  {"PgDn",      "downPage"},
+  {"f",         "downPage"},
+  {" ",         "downPage"},
+  {"^F",        "downPage"},
+  {"Left",      "leftChar"},
+  {"Right",     "rightChar"},
+  {"PgUp",      "upPage"},
+  {"b",         "upPage"},
+  {"^B",        "upPage"},
+  {"Up",        "upLine"},
+  {"k",         "upLine"},
+  {NULL, NULL}
+};
+
+struct mode simpleLessMode[] =
+{
+  {simpleLessKeys, NULL, NULL, 0},
+  {simpleCommandKeys, NULL, NULL, 1},
+  {NULL, NULL, NULL}
+};
+
+struct context simpleLess =
+{
+  simpleEditCommands,
+  simpleLessMode,
+  NULL,
+  NULL,
+  NULL
+};
+
+struct keyCommand simpleMoreKeys[] =
+{
+  {"j",         "downLine"},
+  {"Enter",     "downLine"},
+  {"Return",    "downLine"},
+  {"q",         "quit"},
+  {":q",        "quit"},        // See comments for "less".
+  {"ZZ",        "quit"},
+  {"f",         "downPage"},
+  {" ",         "downPage"},
+  {"^F",        "downPage"},
+  {"b",         "upPage"},
+  {"^B",        "upPage"},
+  {"k",         "upLine"},
+  {NULL, NULL}
+};
+
+struct mode simpleMoreMode[] =
+{
+  {simpleMoreKeys, NULL, NULL, 0},
+  {simpleCommandKeys, NULL, NULL, 1},
+  {NULL, NULL, NULL}
+};
+
+struct context simpleMore =
+{
+  simpleEditCommands,
+  simpleMoreMode,
+  NULL,
+  NULL,
+  NULL
+};
+
+
+// Construct a simple mcedit / cool edit editor.
+
+struct keyCommand simpleMceditKeys[] =
+{
+  {"BS",        "backSpaceChar"},
+  {"Del",       "deleteChar"},
+  {"Down",      "downLine"},
+  {"End",       "endOfLine"},
+  {"F10",       "quit"},
+  {"Esc0",      "quit"},
+  {"F2",        "save"},
+  {"Esc2",      "save"},
+  {"Home",      "startOfLine"},
+  {"Left",      "leftChar"},
+  {"PgDn",      "downPage"},
+  {"PgUp",      "upPage"},
+  {"Enter",     "splitLine"},
+  {"Return",    "splitLine"},
+  {"Right",     "rightChar"},
+  {"Shift F2",  "switchMode"},  // MC doesn't have a command mode.
+  {"Esc:",      "switchMode"},  // Sorta vi like, and coz tmux is screwing with the shift function keys somehow.
+  {"Esc|",      "splitV"},      // MC doesn't have a split window concept, so make these up to match tmux more or less.
+  {"Esc-",      "splitH"},
+  {"Esco",      "switchBoxes"},
+  {"Escx",      "deleteBox"},
+  {"Up",        "upLine"},
+{"^C",  "switchMode"},  // To test the signal stopper.
+{"^D",  "switchMode"},  // To test the signal stopper.
+{"^Q",  "switchMode"},  // To test the signal stopper.
+{"^S",  "switchMode"},  // To test the signal stopper.
+{"^T",  "switchMode"},  // To test the signal stopper.
+{"^Z",  "switchMode"},  // To test the signal stopper.
+{"^\\", "switchMode"},  // To test the signal stopper.
+{"F1",  "switchMode"},  // To test various function keys.
+{"F3",  "switchMode"},  // To test various function keys.
+{"F4",  "switchMode"},  // To test various function keys.
+{"F5",  "switchMode"},  // To test various function keys.
+{"F6",  "switchMode"},  // To test various function keys.
+{"F7",  "switchMode"},  // To test various function keys.
+{"F8",  "switchMode"},  // To test various function keys.
+{"F9",  "switchMode"},  // To test various function keys.
+  {NULL, NULL}
+};
+
+struct mode simpleMceditMode[] =
+{
+  {simpleMceditKeys, NULL, NULL, 0},
+  {simpleCommandKeys, NULL, NULL, 1},
+  {NULL, NULL, NULL}
+};
+
+struct context simpleMcedit =
+{
+  simpleEditCommands,
+  simpleMceditMode,
+  NULL,
+  NULL,
+  NULL
+};
+
+
+// Simple nano editor.
+// Has key to function bindings, but no command line mode.  Has "enter parameter on this line" mode for some commands.
+// Control and meta keys, only singles, unlike emacs and joe.
+// Can have multiple buffers, but no windows.  Think I can skip that for simple editor.
+
+struct function simpleNanoCommands[] =
+{
+  {"backSpaceChar",     "Back space last character.",           0, {backSpaceChar}},
+  {"delete",            "Delete current character.",            0, {deleteChar}},
+  {"down",              "Move cursor down one line.",           0, {downLine}},
+  {"downPage",          "Move cursor down one page.",           0, {downPage}},
+  {"end",               "Go to end of line.",                   0, {endOfLine}},
+  {"left",              "Move cursor left one character.",      0, {leftChar}},
+  {"exit",              "Quit the application.",                0, {quit}},
+  {"right",             "Move cursor right one character.",     0, {rightChar}},
+  {"writeout",          "Save.",                                0, {saveContent}},
+  {"enter",             "Split line at cursor.",                0, {splitLine}},
+  {"home",              "Go to start of line.",                 0, {startOfLine}},
+  {"up",                "Move cursor up one line.",             0, {upLine}},
+  {"upPage",            "Move cursor up one page.",             0, {upPage}},
+  {NULL, NULL, 0, {NULL}}
+};
+
+
+// Hmm, back space, page up, and page down don't seem to have bindable commands according to the web page, but they are bound to keys anyway.
+struct keyCommand simpleNanoKeys[] =
+{
+// TODO - Delete key is ^H dammit.  Find the alternate Esc sequence for Del.
+//  {"^H",      "backSpaceChar"},       // ?
+  {"BS",        "backSpaceChar"},
+  {"^D",        "delete"},
+  {"Del",       "delete"},
+  {"^N",        "down"},
+  {"Down",      "down"},
+  {"^E",        "end"},
+  {"End",       "end"},
+  {"^X",        "exit"},
+  {"F2",        "exit"},
+  {"^O",        "writeout"},
+  {"F3",        "writeout"},
+  {"^A",        "home"},
+  {"Home",      "home"},
+  {"^B",        "left"},
+  {"Left",      "left"},
+  {"^V",        "downPage"},    // ?
+  {"PgDn",      "downPage"},
+  {"^Y",        "upPage"},      // ?
+  {"PgUp",      "upPage"},
+  {"Enter",     "enter"},       // TODO - Not sure if this is correct.
+  {"Return",    "enter"},       // TODO - Not sure if this is correct.
+  {"^F",        "right"},
+  {"Right",     "right"},
+  {"^P",        "up"},
+  {"Up",        "up"},
+  {NULL, NULL}
+};
+
+struct mode simpleNanoMode[] =
+{
+  {simpleNanoKeys, NULL, NULL, 0},
+  {NULL, NULL, NULL}
+};
+
+struct context simpleNano =
+{
+  simpleNanoCommands,
+  simpleNanoMode,
+  NULL,
+  NULL,
+  NULL
+};
+
+
+// Construct a simple vi editor.
+// Only vi is not so simple.  lol
+// The "command line" modes are /, ?, :, and !,
+//   / is regex search.
+//   ? is regex search backwards.
+//   : is ex command mode.
+//   ! is replace text with output from shell command mode.
+// Arrow keys do the right thing in "normal" mode, but not in insert mode.
+// "i" goes into insert mode, "Esc" (or Ctrl-[ or Ctrl-C) gets you out.  So much for "you can do it all touch typing on the home row".  Pffft
+//   Ah, the Esc key WAS a lot closer to the home row (where Tab usually is now) on the original keyboard vi was designed for, ADM3A.
+//   Which is also the keyboard with the arrow keys marked on h, j, k, and l keys.
+//   Did I mention that vi is just a horrid historic relic that should have died long ago?
+//   Emacs looks to have the same problem, originally designed for an ancient keyboard that is nothing like what people actually use these days.
+// "h", "j", "k", "l" move cursor, which is just random keys for dvorak users.
+// ":" goes into ex command mode.
+// ":q" deletes current window in vim.
+// ":qa!" goes into ex mode and does some sort of quit command.
+//   The 'q' is short for quit, the ! is an optional argument to quit.  No idea yet what the a is for, all windows?
+// Del or "x" to delete a character.  Del in insert mode.
+// "X" to backspace.  BS or Ctrl-H to backspace in insert mode.
+//   NOTE - Backspace in normal mode just moves left.
+// Tab or Ctrl-I to insert a tab in insert mode.
+// Return in normal mode goes to the start of the next line, or splits the line in insert mode.
+// ":help" opens a window with help text.
+// Vim window commands.
+
+// Vi needs extra variables and functions.
+static int viTempExMode;
+
+void viMode(view *view)
+{
+  currentBox->view->mode = 0;
+  commandMode = 0;
+  viTempExMode = 0;
+}
+
+void viInsertMode(view *view)
+{
+  currentBox->view->mode = 1;
+  commandMode = 0;
+}
+
+void viExMode(view *view)
+{
+  currentBox->view->mode = 2;
+  commandMode = 1;
+  // TODO - Should change this based on the event, : or Q.
+  viTempExMode = 1;
+  commandLine->prompt = xrealloc(commandLine->prompt, 2);
+  strcpy(commandLine->prompt, ":");
+}
+
+void viBackSpaceChar(view *view)
+{
+  if ((2 == currentBox->view->mode) && (0 == view->cX) && viTempExMode)
+    viMode(view);
+  else
+    backSpaceChar(view);
+}
+
+void viStartOfNextLine(view *view)
+{
+  startOfLine(view);
+  downLine(view);
+}
+
+struct function simpleViCommands[] =
+{
+  // These are actual ex commands.
+  {"insert",            "Switch to insert mode.",               0, {viInsertMode}},
+  {"quit",              "Quit the application.",                0, {quit}},
+  {"visual",            "Switch to visual mode.",               0, {viMode}},
+  {"write",             "Save.",                                0, {saveContent}},
+
+  // These are not ex commands.
+  {"backSpaceChar",     "Back space last character.",           0, {viBackSpaceChar}},
+  {"deleteBox",         "Delete a box.",                        0, {deleteBox}},
+  {"deleteChar",        "Delete current character.",            0, {deleteChar}},
+  {"downLine",          "Move cursor down one line.",           0, {downLine}},
+  {"downPage",          "Move cursor down one page.",           0, {downPage}},
+  {"endOfLine",         "Go to end of line.",                   0, {endOfLine}},
+  {"executeLine",       "Execute a line as a script.",          0, {executeLine}},
+  {"exMode",            "Switch to ex mode.",                   0, {viExMode}},
+  {"leftChar",          "Move cursor left one character.",      0, {leftChar}},
+  {"rightChar",         "Move cursor right one character.",     0, {rightChar}},
+  {"splitH",            "Split box in half horizontally.",      0, {halveBoxHorizontally}},
+  {"splitLine",         "Split line at cursor.",                0, {splitLine}},
+  {"splitV",            "Split box in half vertically.",        0, {halveBoxVertically}},
+  {"startOfLine",       "Go to start of line.",                 0, {startOfLine}},
+  {"startOfNLine",      "Go to start of next line.",            0, {viStartOfNextLine}},
+  {"switchBoxes",       "Switch to another box.",               0, {switchBoxes}},
+  {"upLine",            "Move cursor up one line.",             0, {upLine}},
+  {"upPage",            "Move cursor up one page.",             0, {upPage}},
+  {NULL, NULL, 0, {NULL}}
+};
+
+struct keyCommand simpleViNormalKeys[] =
+{
+  {"BS",        "leftChar"},
+  {"X",         "backSpaceChar"},
+  {"Del",       "deleteChar"},
+  {"x",         "deleteChar"},
+  {"Down",      "downLine"},
+  {"j",         "downLine"},
+  {"End",       "endOfLine"},
+  {"Home",      "startOfLine"},
+  {"Left",      "leftChar"},
+  {"h",         "leftChar"},
+  {"PgDn",      "downPage"},
+  {"^F",        "downPage"},
+  {"PgUp",      "upPage"},
+  {"^B",        "upPage"},
+  {"Enter",     "startOfNextLine"},
+  {"Return",    "startOfNextLine"},
+  {"Right",     "rightChar"},
+  {"l",         "rightChar"},
+  {"i",         "insert"},
+  {":",         "exMode"},      // This is the temporary ex mode that you can backspace out of.  Or any command backs you out.
+  {"Q",         "exMode"},      // This is the ex mode you need to do the "visual" command to get out of.
+  {"^Wv",       "splitV"},
+  {"^W^V",      "splitV"},
+  {"^Ws",       "splitH"},
+  {"^WS",       "splitH"},
+  {"^W^S",      "splitH"},
+  {"^Ww",       "switchBoxes"},
+  {"^W^W",      "switchBoxes"},
+  {"^Wq",       "deleteBox"},
+  {"^W^Q",      "deleteBox"},
+  {"Up",        "upLine"},
+  {"k",         "upLine"},
+  {NULL, NULL}
+};
+
+struct keyCommand simpleViInsertKeys[] =
+{
+  {"BS",        "backSpaceChar"},
+  {"Del",       "deleteChar"},
+  {"Return",    "splitLine"},
+  {"Esc",       "visual"},
+  {"^C",        "visual"},
+  {NULL, NULL}
+};
+
+struct keyCommand simpleExKeys[] =
+{
+  {"BS",        "backSpaceChar"},
+  {"Del",       "deleteChar"},
+  {"Down",      "downLine"},
+  {"End",       "endOfLine"},
+  {"Home",      "startOfLine"},
+  {"Left",      "leftChar"},
+  {"Enter",     "executeLine"},
+  {"Return",    "executeLine"},
+  {"Right",     "rightChar"},
+  {"Esc",       "visual"},
+  {"Up",        "upLine"},
+  {NULL, NULL}
+};
+
+struct mode simpleViMode[] =
+{
+  {simpleViNormalKeys, NULL, NULL, 0},
+  {simpleViInsertKeys, NULL, NULL, 0},
+  {simpleExKeys, NULL, NULL, 1},
+  {NULL, NULL, NULL}
+};
+
+struct context simpleVi =
+{
+  simpleViCommands,
+  simpleViMode,
+  NULL,
+  NULL,
+  NULL
+};
+
+
+// TODO - simple sed editor?  May be out of scope for "simple", so leave it until later?
+// Probably entirely useless for "simple".
+
+
+// TODO - have any unrecognised escape key sequence start up a new box (split one) to show the "show keys" content.
+// That just adds each "Key is X" to the end of the content, and allows scrolling, as well as switching between other boxes.
+
+void boxes_main(void)
+{
+  struct context *context = &simpleMcedit;  // The default is mcedit, coz that's what I use.
+  struct termios termio, oldtermio;
+  char *prompt = "Enter a command : ";
+  unsigned W = 80, H = 24;
+
+  // For testing purposes, figure out which context we use.  When this gets real, the toybox multiplexer will sort this out for us instead.
+  if (toys.optflags & FLAG_m)
+  {
+    if (strcmp(TT.mode, "emacs") == 0)
+      context = &simpleEmacs;
+    else if (strcmp(TT.mode, "joe") == 0)
+      context = &simpleJoe;
+    else if (strcmp(TT.mode, "less") == 0)
+      context = &simpleLess;
+    else if (strcmp(TT.mode, "mcedit") == 0)
+      context = &simpleMcedit;
+    else if (strcmp(TT.mode, "more") == 0)
+      context = &simpleMore;
+    else if (strcmp(TT.mode, "nano") == 0)
+      context = &simpleNano;
+    else if (strcmp(TT.mode, "vi") == 0)
+      context = &simpleVi;
+  }
+
+  // TODO - Should do an isatty() here, though not sure about the usefullness of driving this from a script or redirected input, since it's supposed to be a UI for terminals.
+  //          It would STILL need the terminal size for output though.  Perhaps just bitch and abort if it's not a tty?
+  //          On the other hand, sed don't need no stinkin' UI.  And things like more or less should be usable on the end of a pipe.
+
+  // Grab the old terminal settings and save it.
+  tcgetattr(0, &oldtermio);
+  tcflush(0, TCIFLUSH);
+  termio = oldtermio;
+
+  // Mould the terminal to our will.
+  /*
+    IUCLC       (not in POSIX) Map uppercase characters to lowercase on input.
+    IXON        Enable XON/XOFF flow control on output.
+    IXOFF       Enable XON/XOFF flow control on input.
+    IXANY       (not in POSIX.1; XSI) Enable any character to restart output.
+
+    ECHO        Echo input characters.
+    ECHOE       If ICANON is also set, the ERASE character erases the preceding input character, and WERASE erases the preceding word.
+    ECHOK       If ICANON is also set, the KILL character erases the current line. 
+    ECHONL      If ICANON is also set, echo the NL character even if ECHO is not set. 
+    TOSTOP      Send the SIGTTOU signal to the process group of a background process which tries to write to its controlling terminal.
+    ICANON      Enable canonical mode. This enables the special characters EOF, EOL, EOL2, ERASE, KILL, LNEXT, REPRINT, STATUS, and WERASE, and buffers by lines.
+
+    VTIME       Timeout in deciseconds for non-canonical read.
+    VMIN        Minimum number of characters for non-canonical read.
+
+    raw mode  turning off ICANON, IEXTEN, and ISIG kills most special key processing.
+       termio.c_iflag &= ~(IGNBRK | BRKINT | PARMRK | ISTRIP | INLCR | IGNCR | ICRNL | IXON);
+       termio.c_oflag &= ~OPOST;
+       termio.c_lflag &= ~(ECHO | ECHONL | ICANON | ISIG | IEXTEN);
+       termio.c_cflag &= ~(CSIZE | PARENB);
+       termio.c_cflag |= CS8;
+
+    IGNBRK      ignore BREAK
+    BRKINT      complicated, bet in this context, sends BREAK as '\x00'
+    PARMRK      characters with parity or frame erors are sent as '\x00'
+    ISTRIP      strip 8th byte
+    INLCR       translate LF to CR in input
+    IGLCR       ignore CR
+    OPOST       enable implementation defined output processing
+    ISIG        generate signals on INTR (SIGINT on ^C), QUIT (SIGQUIT on ^\\), SUSP (SIGTSTP on ^Z), DSUSP (SIGTSTP on ^Y)
+    IEXTEN      enable implementation defined input processing, turns on some key -> signal -tuff
+    CSIZE       mask for character sizes, so in this case, we mask them all out
+    PARENB      enable parity
+    CS8         8 bit characters
+
+    VEOF        "sends" EOF on ^D, ICANON turns that on.
+    VSTART      restart output on ^Q, IXON turns that on.
+    VSTATUS     display status info and sends SIGINFO (STATUS) on ^T.  Not in POSIX, not supported in Linux.  ICANON turns that on.
+    VSTOP       stop output on ^S, IXON turns that on.
+  */
+  termio.c_iflag &= ~(IGNBRK | BRKINT | PARMRK | ISTRIP | INLCR | IGNCR | ICRNL | IUCLC | IXON | IXOFF | IXANY);
+  termio.c_oflag &= ~OPOST;
+  termio.c_lflag &= ~(ECHO | ECHOE | ECHOK | ECHONL | TOSTOP | ICANON | ISIG | IEXTEN);
+  termio.c_cflag &= ~(CSIZE | PARENB);
+  termio.c_cflag |= CS8;
+  termio.c_cc[VTIME]=0;  // deciseconds.
+  termio.c_cc[VMIN]=1;
+  tcsetattr(0, TCSANOW, &termio);
+
+  terminal_size(&W, &H);
+  if (toys.optflags & FLAG_w)
+    W = TT.w;
+  if (toys.optflags & FLAG_h)
+    H = TT.h;
+
+  // Create the main box.  Right now the system needs one for wrapping around while switching.  The H - 1 bit is to leave room for our example command line.
+  rootBox = addBox("root", context, toys.optargs[0], 0, 0, W, H - 1);
+  currentBox = rootBox;
+
+  // Create the command line view, sharing the same context as the root.  It will differentiate based on the view mode of the current box.
+  // Also load the command line history as it's file.
+  // TODO - different contexts will have different history files, though what to do about ones with no history, and ones with different histories for different modes?
+  commandLine = addView("command", rootBox->view->content->context, ".boxes.history", 0, H, W, 1);
+  // Add a prompt to it.
+  commandLine->prompt = xrealloc(commandLine->prompt, strlen(prompt) + 1);
+  strcpy(commandLine->prompt, prompt);
+  // Move to the end of the history.
+  moveCursorAbsolute(commandLine, 0, commandLine->content->lines.length, 0, 0);
+
+  // All the mouse tracking methods suck one way or another.  sigh
+  // http://rtfm.etla.org/xterm/ctlseq.html documents xterm stuff, near the bottom is the mouse stuff.
+  // http://leonerds-code.blogspot.co.uk/2012/04/wide-mouse-support-in-libvterm.html is helpful.
+  // Enable mouse (VT200 normal tracking mode, UTF8 encoding).  The limit is 2015.  Seems to only be in later xterms.
+//  fputs("\x1B[?1005h", stdout);
+  // Enable mouse (VT340 locator reporting mode).  In theory has no limit.  Wont actually work though.
+  // On the other hand, only allows for four buttons, so only half a mouse wheel.
+  // Responds with "\1B[e;p;r;c;p&w" where e is event type, p is a bitmap of buttons pressed, r and c are the mouse coords in decimal, and p is the "page number".
+//  fputs("\x1B[1;2'z\x1B[1;3'{", stdout);
+  // Enable mouse (VT200 normal tracking mode).  Has a limit of 256 - 32 rows and columns.  An xterm exclusive I think, but works in roxterm at least.  No wheel reports.
+  // Responds with "\x1B[Mbxy" where x and y are the mouse coords, and b is bit encoded buttons and modifiers - 0=MB1 pressed, 1=MB2 pressed, 2=MB3 pressed, 3=release, 4=Shift, 8=Meta, 16=Control
+//  fputs("\x1B[?1000h", stdout);
+//  fflush(stdout);
+
+  calcBoxes(currentBox);
+  drawBoxes(currentBox);
+  // Do the first cursor update.
+  updateLine(currentBox->view);
+
+  // Run the main loop.
+  handle_keys((long) currentBox->view, handleEvent);
+
+  // TODO - Should remember to turn off mouse reporting when we leave.
+
+  // Restore the old terminal settings.
+  tcsetattr(0, TCSANOW, &oldtermio);
+
+  puts("");
+  fflush(stdout);
+}
diff --git a/src/boxes/dumbsh.c b/src/boxes/dumbsh.c
new file mode 100644
index 0000000..9ad0204
--- /dev/null
+++ b/src/boxes/dumbsh.c
@@ -0,0 +1,283 @@
+/* dumbsh.c - A really dumb shell, to demonstrate handle_keys usage.
+ *
+ * Copyright 2014 David Seikel <won_fang@yahoo.com.au>
+ *
+ * Not a real shell, so doesn't follow any standards,
+ * coz it wont implement them anyway.
+
+USE_DUMBSH(NEWTOY(dumbsh, "", TOYFLAG_USR|TOYFLAG_BIN))
+
+config DUMBSH
+  bool "dumbsh"
+  default n
+  help
+    usage: dumbsh
+
+    A really dumb shell.
+*/
+
+#include "toys.h"
+#include "lib/handlekeys.h"
+
+typedef void (*eventHandler) (void);
+
+struct keyCommand
+{
+  char *key;
+  eventHandler handler;
+};
+
+GLOBALS(
+  unsigned h, w;
+  int x, y;
+  struct double_list *history;
+)
+
+#define TT this.dumbsh
+
+// Sanity check cursor location and update the current line.
+static void updateLine()
+{
+  if (0 > TT.x)  TT.x = 0;
+  if (0 > TT.y)  TT.y = 0;
+  if (TT.w < TT.x)  TT.x = TT.w;
+  if (TT.h < TT.y)  TT.y = TT.h;
+  if (strlen(toybuf) < TT.x)  TT.x = strlen(toybuf);
+  printf("\x1B[%d;0H%-*s\x1B[%d;%dH",
+    TT.y + 1, TT.w, toybuf, TT.y + 1, TT.x + 1);
+  fflush(stdout);
+}
+
+// The various commands.
+static void deleteChar()
+{
+  int j;
+
+  for (j = TT.x; toybuf[j]; j++)
+    toybuf[j] = toybuf[j + 1];
+  updateLine();
+}
+
+static void backSpaceChar()
+{
+  if (TT.x)
+  {
+    TT.x--;
+    deleteChar();
+  }
+}
+
+// This is where we would actually deal with 
+// what ever command the user had typed in.
+// For now we just move on to the next line.
+// TODO - We would want to redirect I/O, capture some keys (^C),
+//        but pass the rest on.
+//        Dunno yet how to deal with that.
+//        We still want handle_keys to be doing it's thing,
+//        so maybe handing it another fd, and a callback.
+//        A function to add and remove fd and callback pairs for
+//        handle_keys to check?
+static void doCommand()
+{
+  toybuf[0] = 0;
+  TT.x = 0;
+  TT.y++;
+  printf("\n");
+  fflush(stdout);
+  updateLine();
+}
+
+static void endOfLine()
+{
+  TT.x = strlen(toybuf);
+  updateLine();
+}
+
+static void leftChar()
+{
+  TT.x--;
+  updateLine();
+}
+
+static void nextHistory()
+{
+  TT.history = TT.history->next;
+  strcpy(toybuf, TT.history->data);
+  TT.x = strlen(toybuf);
+  updateLine();
+}
+
+static void prevHistory()
+{
+  TT.history = TT.history->prev;
+  strcpy(toybuf, TT.history->data);
+  TT.x = strlen(toybuf);
+  updateLine();
+}
+
+static void quit()
+{
+  handle_keys_quit();
+}
+
+static void rightChar()
+{
+  TT.x++;
+  updateLine();
+}
+
+static void startOfLine()
+{
+  TT.x = 0;
+  updateLine();
+}
+
+// The key to command mappings, Emacs style.
+static const struct keyCommand simpleEmacsKeys[] =
+{
+  {"BS",        backSpaceChar},
+  {"Del",       deleteChar},
+  {"^D",        deleteChar},
+  {"Return",    doCommand},
+  {"Enter",     doCommand},
+  {"Down",      nextHistory},
+  {"^N",        nextHistory},
+  {"End",       endOfLine},
+  {"^E",        endOfLine},
+  {"Left",      leftChar},
+  {"^B",        leftChar},
+  {"^X^C",      quit},
+  {"^C",        quit},
+  {"Right",     rightChar},
+  {"^F",        rightChar},
+  {"Home",      startOfLine},
+  {"^A",        startOfLine},
+  {"Up",        prevHistory},
+  {"^P",        prevHistory}
+};
+
+// Callback for incoming sequences from the terminal.
+static int handleEvent(long extra, struct keyevent *event)
+{
+  switch (event->type)
+  {
+    case HK_KEYS :
+    {
+      int j, l = strlen(event->sequence);
+
+      // Search for a key sequence bound to a command.
+      for (j = 0; j < ARRAY_LEN(simpleEmacsKeys); j++)
+      {
+        if (strncmp(simpleEmacsKeys[j].key, event->sequence, l) == 0)
+        {
+          // If it's a partial match, keep accumulating them.
+          if (strlen(simpleEmacsKeys[j].key) != l)
+            return 0;
+          else
+          {
+            if (simpleEmacsKeys[j].handler)  simpleEmacsKeys[j].handler();
+            return 1;
+          }
+        }
+      }
+
+      // See if it's ordinary keys.
+      // NOTE - with vi style ordinary keys can be commands,
+      // but they would be found by the command check above first.
+      if (!event->isTranslated)
+      {
+        if (TT.x < sizeof(toybuf))
+        {
+          int j, l = strlen(event->sequence);
+
+          for (j = strlen(toybuf); j >= TT.x; j--)
+            toybuf[j + l] = toybuf[j];
+          for (j = 0; j < l; j++)
+            toybuf[TT.x + j] = event->sequence[j];
+          TT.x += l;
+          updateLine();
+        }
+      }
+      break;
+    }
+
+    case HK_CSI :
+    {
+      // Is it a cursor location report?
+      if (strcmp("R", event->sequence) == 0)
+      {
+        // Parameters are cursor line and column.
+        // NOTE - This may be sent at other times, not just during terminal resize.
+        //        We are assuming here that it's a resize.
+        // The defaults are 1, which get ignored by the heuristic below.
+        int r = event->params[0], c = event->params[1];
+
+        // Check it's not an F3 key variation, coz some of them use 
+        // the same CSI function command.
+        // This is a heuristic, we are checking against an unusable terminal size.
+        if ((2 == event->count) && (8 < r) && (8 < c))
+        {
+          TT.h = r;
+          TT.w = c;
+          updateLine();
+        }
+        break;
+      }
+    }
+
+    default :  break;
+  }
+
+  // Tell handle_keys to drop it, coz we dealt with it, or it's not one of ours.
+  return 1;
+}
+
+void dumbsh_main(void)
+{
+  struct termios termIo, oldTermIo;
+  char *t = getenv("HOME");
+  int fd;
+
+  // Load bash history.
+  t = xmprintf("%s/%s", t ? t : "", ".bash_history");
+  if (-1 != (fd = open(t, O_RDONLY)))
+  {
+    while ((t = get_line(fd)))  TT.history = dlist_add(&TT.history, t);
+    close(fd);
+  }
+  if (!TT.history)
+    TT.history = dlist_add(&TT.history, "");
+
+  // Grab the old terminal settings and save it.
+  tcgetattr(0, &oldTermIo);
+  tcflush(0, TCIFLUSH);
+  termIo = oldTermIo;
+
+  // Mould the terminal to our will.
+  // In this example we are turning off all the terminal smarts, but real code
+  // might not want that.
+  termIo.c_iflag &= ~(IGNBRK | BRKINT | PARMRK | ISTRIP | INLCR | IGNCR | ICRNL
+                     | IUCLC | IXON | IXOFF | IXANY);
+  termIo.c_oflag &= ~OPOST;
+  termIo.c_lflag &= ~(ECHO | ECHOE | ECHOK | ECHONL | TOSTOP | ICANON | ISIG
+                     | IEXTEN);
+  termIo.c_cflag &= ~(CSIZE | PARENB);
+  termIo.c_cflag |= CS8;
+  termIo.c_cc[VTIME]=0;  // deciseconds.
+  termIo.c_cc[VMIN]=1;
+  tcsetattr(0, TCSANOW, &termIo);
+
+  // Let the mouldy old terminal mold us.
+  TT.w = 80;
+  TT.h = 24;
+  terminal_size(&TT.w, &TT.h);
+
+  // Let's rock!
+  updateLine();
+  handle_keys(0, handleEvent);
+
+  // Clean up.
+  tcsetattr(0, TCSANOW, &oldTermIo);
+  puts("");
+  fflush(stdout);
+}
diff --git a/src/boxes/handlekeys.c b/src/boxes/handlekeys.c
new file mode 100644
index 0000000..8bae529
--- /dev/null
+++ b/src/boxes/handlekeys.c
@@ -0,0 +1,445 @@
+/* handlekeys.c - Generic terminal input handler.
+ *
+ * Copyright 2012 David Seikel <won_fang@yahoo.com.au>
+ */
+
+// I use camelCaseNames internally, instead of underscore_names as is preferred
+// in the rest of toybox.  A small limit of 80 characters per source line infers
+// shorter names should be used.  CamelCaseNames are shorter.  Externally visible
+// stuff is underscore_names as usual.  Plus, I'm used to camelCaseNames, my
+// fingers twitch that way.
+
+#include "toys.h"
+#include "handlekeys.h"
+
+struct key
+{
+  char *code;
+  char *name;
+};
+
+// This table includes some variations I have found on some terminals.
+// http://rtfm.etla.org/xterm/ctlseq.html has a useful guide.
+// TODO - Don't think I got all the linux console or xterm variations.
+// TODO - Add more shift variations, plus Ctrl & Alt variations when needed.
+// TODO - tmux messes with the shift function keys somehow.
+// TODO - Add other miscelany that does not use an escape sequence.
+
+// This is sorted by type, though there is some overlap.
+// Human typing speeds wont need fast searching speeds on this small table.
+// So simple wins out over speed, and sorting by terminal type wins
+// the simple test.
+static struct key keys[] =
+{
+  // Control characters.
+  //  Commented out coz it's the C string terminator, and may confuse things.
+  //{"\x00",            "^@"},          // NUL
+  {"\x01",              "^A"},          // SOH Apparently sometimes sent as Home.
+  {"\x02",              "^B"},          // STX
+  {"\x03",              "^C"},          // ETX SIGINT  Emacs and vi.
+  {"\x04",              "^D"},          // EOT EOF     Emacs, joe, and nano.
+  {"\x05",              "^E"},          // ENQ Apparently sometimes sent as End
+  {"\x06",              "^F"},          // ACK
+  {"\x07",              "^G"},          // BEL
+  {"\x08",              "Del"},         // BS  Delete key, usually.
+  {"\x09",              "Tab"},         // HT
+  {"\x0A",              "Enter"},       // LF  Roxterm translates Ctrl-M to this.
+  {"\x0B",              "^K"},          // VT
+  {"\x0C",              "^L"},          // FF
+  {"\x0D",              "Return"},      // CR  Other Enter/Return key, usually.
+  {"\x0E",              "^N"},          // SO
+  {"\x0F",              "^O"},          // SI  DISCARD
+  {"\x10",              "^P"},          // DLE
+  {"\x11",              "^Q"},          // DC1 SIGCONT  Vi.
+  {"\x12",              "^R"},          // DC2
+  {"\x13",              "^S"},          // DC3 SIGSTOP can't be caught.  Emacs and vi.
+  {"\x14",              "^T"},          // DC4 SIGINFO STATUS
+  {"\x15",              "^U"},          // NAK KILL character
+  {"\x16",              "^V"},          // SYN LNEXT
+  {"\x17",              "^W"},          // ETB WERASE
+  {"\x18",              "^X"},          // CAN KILL character
+  {"\x19",              "^Y"},          // EM  DSUSP SIGTSTP
+  {"\x1A",              "^Z"},          // SUB SIGTSTP
+  // Commented out coz it's the ANSI start byte in the below multibyte keys.
+  // Handled in the code with a timeout.
+  //{"\x1B",            "Esc"},         // ESC Esc key.
+  {"\x1C",              "^\\"},         // FS SIGQUIT
+  {"\x1D",              "^]"},          // GS
+  {"\x1E",              "^^"},          // RS
+  {"\x1F",              "^_"},          // US
+  {"\x7F",              "BS"},          // Backspace key, usually.  Ctrl-? perhaps?
+  // Commented out for the same reason Esc is.
+  //{"\x9B",            "CSI"},         // CSI The eight bit encoding of "Esc [".
+
+  // "Usual" xterm CSI sequences, with ";1" omitted for no modifiers.
+  // Even though we have a proper CSI parser,
+  // these should still be in this table.  Coz we would need a table anyway
+  // in the CSI parser, so might as well keep them with the others.
+  // Also, less code, no need to have a separate scanner for that other table.
+  {"\x9B\x31~",         "Home"},        // Duplicate, think I've seen this somewhere.
+  {"\x9B\x32~",         "Ins"},
+  {"\x9B\x33~",         "Del"},
+  {"\x9B\x34~",         "End"},         // Duplicate, think I've seen this somewhere.
+  {"\x9B\x35~",         "PgUp"},
+  {"\x9B\x36~",         "PgDn"},
+  {"\x9B\x37~",         "Home"},
+  {"\x9B\x38~",         "End"},
+  {"\x9B\x31\x31~",             "F1"},
+  {"\x9B\x31\x32~",             "F2"},
+  {"\x9B\x31\x33~",             "F3"},
+  {"\x9B\x31\x34~",             "F4"},
+  {"\x9B\x31\x35~",             "F5"},
+  {"\x9B\x31\x37~",             "F6"},
+  {"\x9B\x31\x38~",             "F7"},
+  {"\x9B\x31\x39~",             "F8"},
+  {"\x9B\x32\x30~",             "F9"},
+  {"\x9B\x32\x31~",             "F10"},
+  {"\x9B\x32\x33~",             "F11"},
+  {"\x9B\x32\x34~",             "F12"},
+
+  // As above, ";2" means shift modifier.
+  {"\x9B\x31;2~",               "Shift Home"},
+  {"\x9B\x32;2~",               "Shift Ins"},
+  {"\x9B\x33;2~",               "Shift Del"},
+  {"\x9B\x34;2~",               "Shift End"},
+  {"\x9B\x35;2~",               "Shift PgUp"},
+  {"\x9B\x36;2~",               "Shift PgDn"},
+  {"\x9B\x37;2~",               "Shift Home"},
+  {"\x9B\x38;2~",               "Shift End"},
+  {"\x9B\x31\x31;2~",   "Shift F1"},
+  {"\x9B\x31\x32;2~",   "Shift F2"},
+  {"\x9B\x31\x33;2~",   "Shift F3"},
+  {"\x9B\x31\x34;2~",   "Shift F4"},
+  {"\x9B\x31\x35;2~",   "Shift F5"},
+  {"\x9B\x31\x37;2~",   "Shift F6"},
+  {"\x9B\x31\x38;2~",   "Shift F7"},
+  {"\x9B\x31\x39;2~",   "Shift F8"},
+  {"\x9B\x32\x30;2~",   "Shift F9"},
+  {"\x9B\x32\x31;2~",   "Shift F10"},
+  {"\x9B\x32\x33;2~",   "Shift F11"},
+  {"\x9B\x32\x34;2~",   "Shift F12"},
+
+  // "Normal" Some terminals are special, and it seems they only have
+  //  four function keys.
+  {"\x9B\x41",          "Up"},
+  {"\x9B\x42",          "Down"},
+  {"\x9B\x43",          "Right"},
+  {"\x9B\x44",          "Left"},
+  {"\x9B\x46",          "End"},
+  {"\x9BH",             "Home"},
+  {"\x9BP",             "F1"},
+  {"\x9BQ",             "F2"},
+  {"\x9BR",             "F3"},
+  {"\x9BS",             "F4"},
+  {"\x9B\x31;2P",               "Shift F1"},
+  {"\x9B\x31;2Q",               "Shift F2"},
+  {"\x9B\x31;2R",               "Shift F3"},
+  {"\x9B\x31;2S",               "Shift F4"},
+
+  // "Application"  Esc O is known as SS3
+  {"\x1BOA",            "Up"},
+  {"\x1BOB",            "Down"},
+  {"\x1BOC",            "Right"},
+  {"\x1BOD",            "Left"},
+  {"\x1BOF",            "End"},
+  {"\x1BOH",            "Home"},
+  {"\x1BOn",            "Del"},
+  {"\x1BOp",            "Ins"},
+  {"\x1BOq",            "End"},
+  {"\x1BOw",            "Home"},
+  {"\x1BOP",            "F1"},
+  {"\x1BOQ",            "F2"},
+  {"\x1BOR",            "F3"},
+  {"\x1BOS",            "F4"},
+  {"\x1BOT",            "F5"},
+  // These two conflict with the above four function key variations.
+  {"\x9BR",             "F6"},
+  {"\x9BS",             "F7"},
+  {"\x9BT",             "F8"},
+  {"\x9BU",             "F9"},
+  {"\x9BV",             "F10"},
+  {"\x9BW",             "F11"},
+  {"\x9BX",             "F12"},
+
+  // Can't remember, but saw them somewhere.
+  {"\x1BO1;2P",         "Shift F1"},
+  {"\x1BO1;2Q",         "Shift F2"},
+  {"\x1BO1;2R",         "Shift F3"},
+  {"\x1BO1;2S",         "Shift F4"},
+};
+
+static volatile sig_atomic_t sigWinch;
+static int stillRunning;
+
+static void handleSIGWINCH(int signalNumber)
+{
+    sigWinch = 1;
+}
+
+void handle_keys(long extra, int (*handle_event)(long extra, struct keyevent *event))
+{
+  struct keyevent event;
+  fd_set selectFds;
+  struct timespec timeOut;
+  struct sigaction sigAction, oldSigAction;
+  sigset_t signalMask;
+  char buffer[20], sequence[20];
+  int buffIndex = 0, pendingEsc = 0;
+
+  buffer[0] = 0;
+  sequence[0] = 0;
+
+  // Terminals send the SIGWINCH signal when they resize.
+  memset(&sigAction, 0, sizeof(sigAction));
+  sigAction.sa_handler = handleSIGWINCH;
+  sigAction.sa_flags = SA_RESTART;  // Useless if we are using poll.
+  if (sigaction(SIGWINCH, &sigAction, &oldSigAction))
+    perror_exit("can't set signal handler for SIGWINCH");
+  sigemptyset(&signalMask);
+  sigaddset(&signalMask, SIGWINCH);
+
+  // TODO - OS buffered keys might be a problem, but we can't do the
+  // usual timestamp filter for now.
+
+  stillRunning = 1;
+  while (stillRunning)
+  {
+    int j, p, csi = 0;
+
+    // Apparently it's more portable to reset these each time.
+    FD_ZERO(&selectFds);
+    FD_SET(0, &selectFds);
+    timeOut.tv_sec = 0;  timeOut.tv_nsec = 100000000; // One tenth of a second.
+
+    // We got a "terminal size changed" signal, ask the terminal
+    // how big it is now.
+    if (sigWinch)
+    {
+      // Send - save cursor position, down 999, right 999,
+      // request cursor position, restore cursor position.
+      fputs("\x1B[s\x1B[999C\x1B[999B\x1B[6n\x1B[u", stdout);
+      fflush(stdout);
+      sigWinch = 0;
+    }
+
+    // TODO - Should only ask for a time out after we get an Escape, or
+    //        the user requested time ticks.
+    // I wanted to use poll, but that would mean using ppoll, which is
+    // Linux only, and involves defining swear words to get it.
+    p = pselect(0 + 1, &selectFds, NULL, NULL, &timeOut, &signalMask);
+    if (0 > p)
+    {
+      if (EINTR == errno)
+        continue;
+      perror_exit("poll");
+    }
+    else if (0 == p)  // A timeout, trigger a time event.
+    {
+      if (pendingEsc)
+      {
+        // After a short delay to check, this is a real Escape key,
+        // not part of an escape sequence, so deal with it.
+        strcat(sequence, "Esc");
+        buffer[0] = buffIndex = 0;
+      }
+      // TODO - Call some sort of timer tick callback.  This wont be
+      //        a precise timed event, but don't think we need one.
+    }
+    else if ((0 < p) && FD_ISSET(0, &selectFds))
+    {
+      j = xread(0, &buffer[buffIndex], sizeof(buffer) - (buffIndex + 1));
+      if (j == 0)    // End of file.
+        stillRunning = 0;
+      else
+      {
+        buffIndex += j;
+        buffer[buffIndex] = 0;
+
+        // Send raw keystrokes, mostly for things like showkey.
+        event.type = HK_RAW;
+        event.sequence = buffer;
+        event.isTranslated = 0;
+        handle_event(extra, &event);
+
+        if (sizeof(buffer) < (buffIndex + 1))  // Ran out of buffer.
+        {
+          buffer[buffIndex] = 0;
+          fprintf(stderr, "Full buffer - %s  ->  %s\n", buffer, sequence);
+          for (j = 0; buffer[j]; j++)
+            fprintf(stderr, "(%x) %c, ", (int) buffer[j], buffer[j]);
+          fflush(stderr);
+          buffer[0] = buffIndex = 0;
+        }
+      }
+    }
+
+    // Check for lone Esc first, wait a bit longer if it is.
+    pendingEsc = ((0 == buffer[1]) && ('\x1B' == buffer[0]));
+    if (pendingEsc)  continue;
+
+    // Check if it's a CSI before we check for the known key sequences.
+    // C29B is the UTF8 encoding of CSI.
+    // In all cases we reduce CSI to 9B to keep the keys table shorter.
+    if ((('\x1B' == buffer[0]) && ('[' == buffer[1]))
+      || (('\xC2' == buffer[0]) && ('\x9B' == buffer[1])))
+    {
+      buffer[0] = '\x9B';
+      for (j = 1; buffer[j]; j++)
+        buffer[j] = buffer[j + 1];
+      buffIndex--;
+    }
+    csi = ('\x9B' == buffer[0]);
+
+    // Check for known key sequences.
+    // For a real timeout checked Esc, buffer is now empty, so this for loop
+    // wont find it anyway.  While it's true we could avoid it by checking,
+    // the user already had to wait for a time out, and this loop wont take THAT long.
+    for (j = 0; j < ARRAY_LEN(keys); j++)
+    {
+      if (strcmp(keys[j].code, buffer) == 0)
+      {
+        strcat(sequence, keys[j].name);
+        buffer[0] = buffIndex = 0;
+        csi = 0;
+        break;
+      }
+    }
+
+    // Find out if it's a CSI sequence that's not in the known key sequences.
+    if (csi)
+    {
+      /* ECMA-048 section 5.2 defines this, and is unreadable.
+       * So I'll include some notes here that tries to simplify that.
+       *
+       * The CSI format is - CSI [private] n1 ; n2 [extra] final
+       * Each of those parts, except for the initial CSI bytes, is an ordinary
+       * ASCII character.
+       *
+       * The optional [private] part is one of these characters "<=>?".
+       * If the first byte is one of these, then this is a private command, if
+       * it's one of the other n1 ones, it's not private.
+       *
+       * Next is a semi colon separated list of parameters (n1, n2, etc), which
+       * can be any characters from this set "01234567890:;<=>?".  What the non
+       * digit ones mean is up to the command.  Parameters can be left out, but
+       * their defaults are command dependant.
+       *
+       * Next is an optional [extra] part from this set of characters
+       * "!#$%&'()*+,-./", which includes double quotes.  Can be many of these,
+       * likely isn't.
+       *
+       * Finally is the "final" from this set of characters "@[\]^_`{|}~", plus
+       * upper and lower case letters.  It's private if it's one of these 
+       * "pqrstuvwxyz{|}~".  Though the "private" ~ is used for key codes.
+       *
+       * A full CSI command is the private, extra, and final parts.
+       *
+       * Any C0 controls, DEL (0x7f), or higher characters are undefined.
+       * TODO - So abort the current CSI and start from scratch on one of those.
+       */
+
+      if ('M' == buffer[1])
+      {
+        // We have a mouse report, which is CSI M ..., where the rest is
+        // binary encoded, more or less.  Not fitting into the CSI format.
+        // To make things worse, can't tell how long this will be.
+        // So leave it up to the caller to tell us if they used it.
+        event.type = HK_MOUSE;
+        event.sequence = buffer;
+        event.isTranslated = 0;
+        if (handle_event(extra, &event))
+        {
+          buffer[0] = buffIndex = 0;
+          sequence[0] = 0;
+        }
+      }
+      else
+      {
+        char *t, csFinal[8];
+        int csIndex = 1, csParams[8];
+
+        csFinal[0] = 0;
+        p = 0;
+
+        // Unspecified params default to a value that is command dependant.
+        // However, they will never be negative, so we can use -1 to flag
+        // a default value.
+        for (j = 0; j < ARRAY_LEN(csParams); j++)
+          csParams[j] = -1;
+
+        // Check for the private bit.
+        if (index("<=>?", buffer[1]))
+        {
+          csFinal[0] = buffer[1];
+          csFinal[1] = 0;
+          csIndex++;
+        }
+
+        // Decode parameters.
+        j = csIndex;
+        do
+        {
+          // So we know when we get to the end of parameter space.
+          t = index("01234567890:;<=>?", buffer[j + 1]);
+          // See if we passed a paremeter.
+          if ((';' == buffer[j]) || (!t))
+          {
+            // Only stomp on the ; if it's really the ;.
+            if (t)
+              buffer[j] = 0;
+            // Empty parameters are default parameters, so only deal with
+            // non defaults.
+            if (';' != buffer[csIndex] || (!t))
+            {
+              // TODO - Might be ":" in the number somewhere, but we are not
+              // expecting any in anything we do.
+              csParams[p] = atoi(&buffer[csIndex]);
+            }
+            p++;
+            csIndex = j + 1;
+          }
+          j++;
+        }
+        while (t);
+
+        // Check if we got the final byte, and send it to the callback.
+        strcat(csFinal, &buffer[csIndex]);
+        t = csFinal + strlen(csFinal) - 1;
+        if (('\x40' <= (*t)) && ((*t) <= '\x7e'))
+        {
+          event.type = HK_CSI;
+          event.sequence = csFinal;
+          event.isTranslated = 1;
+          event.count = p;
+          event.params = csParams;
+          handle_event(extra, &event);
+          buffer[0] = buffIndex = 0;
+          sequence[0] = 0;
+        }
+      }
+    }
+
+    // Pass the result to the callback.
+    if (sequence[0] || buffer[0])
+    {
+      char b[strlen(sequence) + strlen(buffer) + 1];
+
+      sprintf(b, "%s%s", sequence, buffer);
+      event.type = HK_KEYS;
+      event.sequence = b;
+      event.isTranslated = (0 != sequence[0]);
+      if (handle_event(extra, &event))
+      {
+        buffer[0] = buffIndex = 0;
+        sequence[0] = 0;
+      }
+    }
+  }
+
+  sigaction(SIGWINCH, &oldSigAction, NULL);
+}
+
+void handle_keys_quit()
+{
+  stillRunning = 0;
+}
diff --git a/src/boxes/handlekeys.h b/src/boxes/handlekeys.h
new file mode 100644
index 0000000..868183f
--- /dev/null
+++ b/src/boxes/handlekeys.h
@@ -0,0 +1,76 @@
+/* handlekeys.h - Generic terminal input handler.
+ *
+ * Copyright 2012 David Seikel <won_fang@yahoo.com.au>
+ */
+
+enum keyeventtype{
+  HK_CSI,
+  HK_KEYS,
+  HK_MOUSE,
+  HK_RAW
+};
+
+struct keyevent {
+  enum keyeventtype type;       // The type of this event.
+  char *sequence;               // Either a translated sequence, or raw bytes.
+  int isTranslated;             // Whether or not sequence is translated.
+  int count;                    // Number of entries in params.
+  int *params;                  // For CSI events, the decoded parameters.
+};
+
+/* An input loop that handles keystrokes and terminal CSI commands.
+ *
+ * Reads stdin, trying to translate raw keystrokes into something more readable.
+ * See the keys[] array at the top of handlekeys.c for what byte sequences get
+ * translated into what key names.  See dumbsh.c for an example of usage.
+ * A 0.1 second delay is used to detect the Esc key being pressed, and not Esc
+ * being part of a raw keystroke.
+ *
+ * handle_keys also tries to decode CSI commands that terminals can send.
+ * Some keystrokes are CSI commands, but those are translated as key sequences
+ * instead of CSI commands.
+ *
+ * handle_keys also sets up a SIGWINCH handler to catch terminal resizes,
+ * and sends a request to the terminal to report it's current size when it gets
+ * a SIGWINCH.  This is the main reason for HK_CSI, as those reports are
+ * sent as CSI.  It's still up to the user code to recognise and deal with the
+ * terminal resize response, but at least it's nicely decoded for you.
+ *
+ * Arguments -
+ *  extra           - arbitrary data that gets passed back to the callbacks.
+ *  handle_event    - a callback to handle sequences.
+ *
+ * handle_event is called when a complete sequence has been accumulated.  It is
+ * passed a keyevent structure.  The type member of that structure determines
+ * what sort of event this is.  What's in the rest of the keyevent depends on
+ * the type -
+ *
+ * HK_CSI
+ *   sequence is the fully decoded CSI command, including the private  and intermediate characters.
+ *   isTranslated is 1, since the CSI command has been translated.
+ *   count is the count of translated CSI parameters.
+ *   params is an array of translateted CSI parameters.
+ *   Empty parameters are set to -1, coz -1 parameters are not legal,
+ *   and empty ones should default to something that is command dependant.
+ *
+ * HK_KEYS
+ *  sequence the keystrokes as ASCII, either translated or not.
+ *  isTranslated if 0, then sequence is ordinary keys, otherwise
+ *  sequence is the names of keys, from the keys[] array.
+ *  count and params are not used.
+ *
+ * For HK_KEYS handle_event should return 1 if the sequence has been dealt with,
+ * or ignored.  It should return 0, if handle_keys should keep adding more
+ * translated keystroke sequences on the end, and try again later.
+ * 0 should really only be used if it's a partial match, and we need more
+ * keys in the sequence to make a full match.
+ *
+ * HK_MOUSE
+ *   sequence is the raw bytes of the mouse report.  The rest are not used.
+ *
+ */
+void handle_keys(long extra, int (*handle_event)(long extra, struct keyevent *event));
+
+
+/* Call this when you want handle_keys to return. */
+void handle_keys_quit();
diff --git a/src/boxes/showkey.c b/src/boxes/showkey.c
new file mode 100644
index 0000000..de1f804
--- /dev/null
+++ b/src/boxes/showkey.c
@@ -0,0 +1,149 @@
+/* showkey.c - Shows the keys pressed.
+ *
+ * Copyright 2014 David Seikel <won_fang@yahoo.com.au>
+ *
+ * Not actually a standard, seems to be three different versions.
+ * The original kbd - http://kbd-project.org/
+ * The kbd fork console-tools - http://lct.sourceforge.net/
+ * A utility invented by Eric S. Raymond - http://catb.org/esr/showkey/
+
+USE_SHOWKEY(NEWTOY(showkey, "", TOYFLAG_USR|TOYFLAG_BIN))
+
+config SHOWKEY
+  bool "showkey"
+  default n
+  help
+    usage: showkey
+
+    Shows the keys pressed.
+*/
+
+#include "toys.h"
+#include "lib/handlekeys.h"
+
+typedef void (*eventHandler) (void);
+
+struct keyCommand
+{
+  char *key;
+  eventHandler handler;
+};
+
+GLOBALS(
+  unsigned h, w;
+  int x, y;
+)
+
+#define TT this.showkey
+
+
+static void quit()
+{
+  printf("Quitting.\r\n");
+  handle_keys_quit();
+}
+
+// The key to command mappings.
+static struct keyCommand simpleKeys[] =
+{
+  {"^C",        quit}
+};
+
+// Callback for incoming sequences from the terminal.
+static int handleEvent(long extra, struct keyevent *event)
+{
+  int i;
+
+  switch (event->type)
+  {
+    case HK_RAW :
+    {
+      printf("RAW ");
+      for (i = 0; event->sequence[i]; i++)
+      {
+        printf("(%x) ", (int) event->sequence[i]);
+        if (32 > event->sequence[i])
+          printf("^%c, ", (int) event->sequence[i] + 'A' - 1);
+        else
+          printf("%c, ", (int) event->sequence[i]);
+      }
+      printf("-> ");
+      break;
+    }
+
+    case HK_KEYS :
+    {
+      int l = strlen(event->sequence);
+
+      if (event->isTranslated)
+        printf("TRANSLATED - ");
+      else
+        printf("KEY - ");
+      printf("%s\r\n", event->sequence);
+
+      // Search for a key sequence bound to a command.
+      for (i = 0; i < ARRAY_LEN(simpleKeys); i++)
+      {
+        if (strncmp(simpleKeys[i].key, event->sequence, l) == 0)
+        {
+          // If it's a partial match, keep accumulating them.
+          if (strlen(simpleKeys[i].key) != l)
+            return 0;
+          else
+            if (simpleKeys[i].handler)  simpleKeys[i].handler();
+        }
+      }
+      break;
+    }
+
+    case HK_CSI :
+    {
+      // Is it a cursor location report?
+      if (strcmp("R", event->sequence) == 0)
+      {
+        printf("CSI cursor position - line %d, column %d\r\n", event->params[0], event->params[1]);
+        return 1;
+      }
+
+      printf("CSI command %s - ", event->sequence);
+      for (i = 0; i < event->count; i++)
+        printf("%d ", event->params[i]);
+      printf("\r\n");
+      break;
+    }
+
+    default :  break;
+  }
+
+  return 1;
+}
+
+void showkey_main(void)
+{
+  struct termios termIo, oldTermIo;
+
+  // Grab the old terminal settings and save it.
+  tcgetattr(0, &oldTermIo);
+  tcflush(0, TCIFLUSH);
+  termIo = oldTermIo;
+
+  // Mould the terminal to our will.
+  // In this example we are turning off all the terminal smarts, but real code
+  // might not want that.
+  termIo.c_iflag &= ~(IGNBRK | BRKINT | PARMRK | ISTRIP | INLCR | IGNCR | ICRNL
+                     | IUCLC | IXON | IXOFF | IXANY);
+  termIo.c_oflag &= ~OPOST;
+  termIo.c_lflag &= ~(ECHO | ECHOE | ECHOK | ECHONL | TOSTOP | ICANON | ISIG
+                     | IEXTEN);
+  termIo.c_cflag &= ~(CSIZE | PARENB);
+  termIo.c_cflag |= CS8;
+  termIo.c_cc[VTIME]=0;  // deciseconds.
+  termIo.c_cc[VMIN]=1;
+  tcsetattr(0, TCSANOW, &termIo);
+
+  handle_keys(0, handleEvent);
+
+  tcsetattr(0, TCSANOW, &oldTermIo);
+  puts("");
+  fflush(stdout);
+}
diff --git a/src/build/fcgi2 b/src/build/fcgi2
new file mode 160000
+Subproject 3a29b212f4885182ebb269e4bd3f12c76fc5ebb
diff --git a/src/build/luajit b/src/build/luajit
new file mode 160000
+Subproject 0ad60ccbc3768fa8e3e726858adf261950edbc2
diff --git a/src/build/qlibc b/src/build/qlibc
new file mode 160000
+Subproject 25d5f5ce44ec4c863edbeaecdcb4d3c05dcf3aa
diff --git a/src/build/toybox b/src/build/toybox
new file mode 160000
+Subproject f01dcd6e57ec8a7f41fc7c413d4f524d7f21c15
diff --git a/src/git-sub-modules/README b/src/git-sub-modules/README
new file mode 100644
index 0000000..1cf4e1a
--- /dev/null
+++ b/src/git-sub-modules/README
@@ -0,0 +1,3 @@
+Put git sub modules here, and then add code to BuildIt.sh to move them to
+where they are needed, or link them.  Poor man's git sub modules /
+subtrees, coz otherwise it gets complex.
diff --git a/src/git-sub-modules/fcgi2 b/src/git-sub-modules/fcgi2
new file mode 160000
+Subproject ca92b995d836c84e0433c1550c82dbdc98e5237
diff --git a/src/git-sub-modules/luajit b/src/git-sub-modules/luajit
new file mode 160000
+Subproject 0ad60ccbc3768fa8e3e726858adf261950edbc2
diff --git a/src/git-sub-modules/qlibc b/src/git-sub-modules/qlibc
new file mode 160000
+Subproject 25d5f5ce44ec4c863edbeaecdcb4d3c05dcf3aa
diff --git a/src/git-sub-modules/toybox b/src/git-sub-modules/toybox
new file mode 160000
+Subproject 5a6d1746baacb40e2a3f094af50dbe9871afa3c
diff --git a/src/miniconfig b/src/miniconfig
new file mode 100644
index 0000000..9f8fe88
--- /dev/null
+++ b/src/miniconfig
@@ -0,0 +1,13 @@
+CONFIG_BOXES=y
+CONFIG_HELP=y
+CONFIG_PS=y
+CONFIG_RM=y
+CONFIG_SH=y
+CONFIG_SU=y
+CONFIG_UUIDGEN=y
+CONFIG_SLEDJCHISL=y
+CONFIG_TOYBOX_FREE=y
+CONFIG_TOYBOX_HELP=y
+CONFIG_TOYBOX_HELP_DASHDASH=y
+CONFIG_TOYBOX_I18N=y
+CONFIG_TOYBOX_SUID=y
diff --git a/src/sledjchisl/README b/src/sledjchisl/README
new file mode 100644
index 0000000..31a4b30
--- /dev/null
+++ b/src/sledjchisl/README
@@ -0,0 +1,118 @@
+I'm re-purposing this for SledjHamr https://sledjhamr.org/git/docs/index.html
+
+The general structure of SledjHamr is a bunch of servers talking to each
+other via Internet (or just local) connections.  One of them is a web
+server for assets, world data, and inventory.  Actually most of OpenSim
+is just a collection of web servers.
+
+Originally I didn't think using a web based world client was a good idea,
+however it might be better to have one, for reasons.  Now I need a web
+management console that can do all the things the current tmux console
+can, including OpenSim console and commands.  Plus account management for
+users.  I can also use a web based Jabber / XMPP front end to chat, IM,
+and group chatter, which would run in the normal viewers web browser. 
+This provides a doorway into putting SledjHamr stuff in existing viewers
+without needing them to support it.  So a web based viewer now makes more
+sense, and also means we can get away with not needing a viewer at all.
+
+Toybox itself doesn't include a web server, and I don't think there is
+one on the roadmap.  So we have to use an external web server, which was
+a design goal of SledjHamr in the first place, using existing mature
+HTTP infrastructure, coz that's already solved problems for a bunch of
+things that plague OS/SL to this day.  Clear your cache!  Pffft.
+
+So sledjchisl.c will be the "love world server", though initially it just
+drives OpenSim_SC in tmux via tmux commands to send keys and read output. 
+Later it might run opensim_SC directly and use STDIN and STDOUT to do
+everything.  It'll also provide the text management front end that runs
+in the left tmux panel of the first window, which is why it's based on
+boxes in the first place.  Later still it can take over opensim_SC
+functions as I move them out of mono.
+
+We will need a text, web, and GUI version of this management front end. 
+Hmmm, maybe don't need a GUI version, GUI users can just run a terminal.
+
+After much research, FastCGI / FCGI seems to be the most portable way of
+interfacing with existing web servers.  FCGI protocol closes STDERR and
+STDOUT, and uses STDIN as it's two way communications channel to the web
+server, so our FCGI module can't be used as the text management front
+end.  This is probably a good idea to keep them seperate anyway, for
+security, coz the web server is exposed to the world, the console isn't.
+
+Currently sledjchisl.c tests to see if it's running in tmux already, if
+it isn't it starts up tmux runs itself into this new tmux, then exits. 
+So it could also test if it's running from FCGI, and switch to web mode,
+then it'll need to find the tmuxed instance to send commands to it. 
+Either via nails connection, or sending tmux commands via shell.
+
+FCGI has methods of dealing with auth and templates.  B-)
+
+So for now I think I'll have the text and web management front ends in
+sledjchisl.c, and the love world server as well.  I can split them up
+later if I need to.
+
+
+--------------------------------------------------------------------
+
+How to install it.
+------------------
+
+It's all still partly written, un-released, and experimental at the
+moment.  So thes are just rough notes about what is needed.
+
+There are two parts, the OpenSim runner part and the web pages part.  The
+OpenSim runner part requjires the rest of opensim-SC to be installed,
+which is covered by other documents in this source code repo.  SO the
+below only talks about the web pages part.
+
+So far I have only tried this with Apache 2, but it should work fine with
+other web servers that support FCGI.  I'm using spawn-fcgi which was
+written for lighttpd, and seems to be the proper way to support FCGI in
+Nginx as well.
+
+Until I have actually released this, it'll be source code only.  So you
+need a C development environment to compile all the C source code.
+
+Some of the dependencies are included, like LuaJIT, qLibc, the FCGI SDK,
+and toybox.  Or at least their source code git ropes are cloned during
+the build stage.  The other dependencies are the development environments
+for MariaDB or MySQL (only tested with MariaDB), OpenSSL, and UUID.  And
+spawn-fcgi.  In a Debian based Linux distro, that could be installed by
+something like -
+
+apt install libmariadbclient-dev libssl1.0-dev uuid-dev spawn-fcgi
+
+Once you have all of that, you can run the src/BuildIt.sh script to put
+it all together.  That script will also actually run the web side of
+things.  Often during this early development process, that script will
+run things under a test tool like valgrind, so you'll probably need that
+to.
+
+You'll need to configure your web server to pass web requests onto
+sledjchisl.  I'll add instructions for other popular web servers later,
+but for now, this is what to do with Apache 2.
+
+Load the mod_proxy_fcgi module.  Include something like this in your
+virtual host definition -
+
+<FilesMatch "\.fcgi$">
+  SetHandler "proxy:unix:///opt/opensim_SC/var/cache/sledjchisl.socket|fcgi://localhost/"
+</FilesMatch>
+
+Adjust that unix:// path to match if you have installed things elsewhere. 
+Also make that directory readable by the web server group.
+
+Copy the files in example/www to where eveqer your web servers document
+root is.
+
+Note that the account.html dynamic web page redirects to a HTTPS version
+of itself, so you'll need HTTPS to be working.
+
+The current web pages will then be available at something like -
+
+http://localhost/sledjchisl.fcgi/loginpage.html
+
+http://localhost/sledjchisl.fcgi/stats.html
+
+https://localhost/sledjchisl.fcgi/account.html
+
diff --git a/src/sledjchisl/fcgi_SC.c b/src/sledjchisl/fcgi_SC.c
new file mode 100644
index 0000000..36aba77
--- /dev/null
+++ b/src/sledjchisl/fcgi_SC.c
@@ -0,0 +1,13 @@
+/* fcgi_SC.h - Generic fcgi handler, coz the others all suck.
+ *
+ * Copyright 2020 David Seikel <onefang@sledjhamr.org>
+ */
+
+// I use camelCaseNames internally, instead of underscore_names as is preferred
+// in the rest of toybox.  A small limit of 80 characters per source line infers
+// shorter names should be used.  CamelCaseNames are shorter.  Externally visible
+// stuff is underscore_names as usual.  Plus, I'm used to camelCaseNames, my
+// fingers twitch that way.
+
+#include "toys.h"
+#include "fcgi_SC.h"
diff --git a/src/sledjchisl/fcgi_SC.h b/src/sledjchisl/fcgi_SC.h
new file mode 100644
index 0000000..2b3fa65
--- /dev/null
+++ b/src/sledjchisl/fcgi_SC.h
@@ -0,0 +1,136 @@
+/* fcgi_SC.h - Generic fcgi handler, coz the oters all suck.
+ *
+ * Copyright 2020 David Seikel <onefang@sledjhamr.org>
+ */
+
+enum fcgiEventType{
+  FSC_CSI,
+  FSC_KEYS,
+  FSC_MOUSE,
+  FSC_RAW
+};
+
+struct fcgiEvent {
+  enum fcgiEventType type;      // The type of this event.
+  char *sequence;               // Either a translated sequence, or raw bytes.
+  int isTranslated;             // Whether or not sequence is translated.
+  int count;                    // Number of entries in params.
+  int *params;                  // For CSI events, the decoded parameters.
+};
+
+
+
+
+// From the spec.
+
+/*
+ * Listening socket file number
+ */
+#define FCGI_LISTENSOCK_FILENO 0
+
+typedef struct {
+    unsigned char version;
+    unsigned char type;
+    unsigned char requestIdB1;
+    unsigned char requestIdB0;
+    unsigned char contentLengthB1;
+    unsigned char contentLengthB0;
+    unsigned char paddingLength;
+    unsigned char reserved;
+} FCGI_Header;
+
+/*
+ * Number of bytes in a FCGI_Header.  Future versions of the protocol
+ * will not reduce this number.
+ */
+#define FCGI_HEADER_LEN  8
+
+/*
+ * Value for version component of FCGI_Header
+ */
+#define FCGI_VERSION_1           1
+
+/*
+ * Values for type component of FCGI_Header
+ */
+#define FCGI_BEGIN_REQUEST       1
+#define FCGI_ABORT_REQUEST       2
+#define FCGI_END_REQUEST         3
+#define FCGI_PARAMS              4
+#define FCGI_STDIN               5
+#define FCGI_STDOUT              6
+#define FCGI_STDERR              7
+#define FCGI_DATA                8
+#define FCGI_GET_VALUES          9
+#define FCGI_GET_VALUES_RESULT  10
+#define FCGI_UNKNOWN_TYPE       11
+#define FCGI_MAXTYPE (FCGI_UNKNOWN_TYPE)
+
+/*
+ * Value for requestId component of FCGI_Header
+ */
+#define FCGI_NULL_REQUEST_ID     0
+
+typedef struct {
+    unsigned char roleB1;
+    unsigned char roleB0;
+    unsigned char flags;
+    unsigned char reserved[5];
+} FCGI_BeginRequestBody;
+
+typedef struct {
+    FCGI_Header header;
+    FCGI_BeginRequestBody body;
+} FCGI_BeginRequestRecord;
+
+/*
+ * Mask for flags component of FCGI_BeginRequestBody
+ */
+#define FCGI_KEEP_CONN  1
+
+/*
+ * Values for role component of FCGI_BeginRequestBody
+ */
+#define FCGI_RESPONDER  1
+#define FCGI_AUTHORIZER 2
+#define FCGI_FILTER     3
+
+typedef struct {
+    unsigned char appStatusB3;
+    unsigned char appStatusB2;
+    unsigned char appStatusB1;
+    unsigned char appStatusB0;
+    unsigned char protocolStatus;
+    unsigned char reserved[3];
+} FCGI_EndRequestBody;
+
+typedef struct {
+    FCGI_Header header;
+    FCGI_EndRequestBody body;
+} FCGI_EndRequestRecord;
+
+/*
+ * Values for protocolStatus component of FCGI_EndRequestBody
+ */
+#define FCGI_REQUEST_COMPLETE 0
+#define FCGI_CANT_MPX_CONN    1
+#define FCGI_OVERLOADED       2
+#define FCGI_UNKNOWN_ROLE     3
+
+/*
+ * Variable names for FCGI_GET_VALUES / FCGI_GET_VALUES_RESULT records
+ */
+#define FCGI_MAX_CONNS  "FCGI_MAX_CONNS"
+#define FCGI_MAX_REQS   "FCGI_MAX_REQS"
+#define FCGI_MPXS_CONNS "FCGI_MPXS_CONNS"
+
+typedef struct {
+    unsigned char type;    
+    unsigned char reserved[7];
+} FCGI_UnknownTypeBody;
+
+typedef struct {
+    FCGI_Header header;
+    FCGI_UnknownTypeBody body;
+} FCGI_UnknownTypeRecord;
+
diff --git a/src/sledjchisl/script.lua b/src/sledjchisl/script.lua
new file mode 100644
index 0000000..1e4b909
--- /dev/null
+++ b/src/sledjchisl/script.lua
@@ -0,0 +1,18 @@
+-- script.lua
+
+-- This works coz LuaJIT automatically loads the jit module.
+if type(jit) == 'table' then
+  io.write('script.lua is being run by ' .. jit.version .. ' under ' .. jit.os .. ' on a ' .. jit.arch .. '\n')
+else
+  io.write('script.lua is being run by Lua version ' .. _VERSION .. '\n')
+end
+
+-- Receives a table, returns the sum of its components.
+io.write("The table the script received has:\n");
+x = 0
+for i = 1, #foo do
+  print(i, foo[i])
+  x = x + foo[i]
+end
+io.write("Returning data back to C\n");
+return x
diff --git a/src/sledjchisl/sledjchisl.c b/src/sledjchisl/sledjchisl.c
new file mode 100644
index 0000000..42ed205
--- /dev/null
+++ b/src/sledjchisl/sledjchisl.c
@@ -0,0 +1,7342 @@
+/* sledjchisl.c - opensim-SC management system.
+ *
+ * Copyright 2020 David Seikel <sledjchisl@sledjhamr.org>
+ * Not in SUSv4.  An entirely new invention, thus no web site either.
+
+USE_SLEDJCHISL(NEWTOY(sledjchisl, "m(mode):", TOYFLAG_USR|TOYFLAG_BIN))
+
+config SLEDJCHISL
+  bool "sledjchisl"
+  default y
+  help
+    usage: sledjchisl [-m|--mode mode]
+
+    opensim-SC management system.
+*/
+
+
+// TODO - figure out how to automate testing of this.
+//          Being all interactive and involving external web servers / viewers makes it hard.
+
+// TODO - do all the setup on first run, and check if needed on each start up, to be self healing.
+
+// TODO - pepper could be entered on the console on startup if it's not defined, as a master password sort of thing.
+//          I'd go as far as protecting the database credentials that way, but legacy OpenSim needs it unprotected.
+//          Also keep in mind, people want autostart of their services without having to enter passwords on each boot.
+
+// TODO - once it is event driven, periodically run things like session clean ups, self healing, and the secure.sh thing.
+//          And backups off course.
+//          As well as regular database pings to keep the connection open.
+
+#include <fcgi_config.h>
+#ifdef _WIN32
+#include <process.h>
+#else
+extern char **environ;
+#endif
+// Don't overide standard stdio stuff.
+#define NO_FCGI_DEFINES
+#include <fcgi_stdio.h>
+#undef NO_FCGI_DEFINES
+//#include "fcgiapp.h"
+
+#include <lua.h>
+#include <lualib.h>
+#include <lauxlib.h>
+#include <luajit.h>
+
+#include "lib/fcgi_SC.h"
+#include "lib/handlekeys.h"
+
+// Both my_config.h and fcgi_config.h define the same PACKAGE* variables, which we don't use anyway, 
+// I deal with that by using a sed invokation when building fcgi2.
+
+// https://mariadb.com/kb/en/about-mariadb-connector-c/                         Official docs.
+// http://dev.mysql.com/doc/refman/5.5/en/c-api-function-overview.html          MySQL docs.
+// http://zetcode.com/db/mysqlc/                                                MySQL tutorial.
+#include <my_global.h>
+#include <mysql.h>
+
+#include <qlibc.h>
+#include <extensions/qconfig.h>
+
+// TODO - I should probably replace openSSL with something else.  Only using it for the hash functions, and apparently it's got a bit of a bad rep.
+//          qLibc optionally uses openSSL for it's HTTP client stuff.
+#include <openssl/crypto.h>
+#include <openssl/evp.h>
+#include "openssl/hmac.h"
+#include <uuid/uuid.h>
+
+// Toybox's strend overrides another strend that causes MariaDB library to crash.  Renaming it to tb_strend helps.
+// I deal with that by using a sed invokation when building toybox.
+#include "toys.h"
+
+
+GLOBALS(
+  char *mode;
+)
+
+#define TT this.sledjchisl
+
+#define FLAG_m  2
+
+
+
+// Duplicate some small amount of code from qLibc, coz /, + and, = are not good choices, and the standard says we can pick those.
+/**
+ * Encode data using BASE64 algorithm.
+ *
+ * @param bin   a pointer of input data.
+ * @param size  the length of input data.
+ *
+ * @return a malloced string pointer of BASE64 encoded string in case of
+ *         successful, otherwise returns NULL
+ *
+ * @code
+ *   const char *text = "hello world";
+ *
+ *   char *encstr = qB64_encode(text, strlen(text));
+ *   if(encstr == NULL) return -1;
+ *
+ *   printf("Original: %s\n", text);
+ *   printf("Encoded : %s\n", encstr);
+ *
+ *   size_t decsize = qB64_decode(encstr);
+ *
+ *   printf("Decoded : %s (%zu bytes)\n", encstr, decsize);
+ *   free(encstr);
+ *
+ *   --[output]--
+ *   Original: hello world
+ *   Encoded:  aGVsbG8gd29ybGQ=
+ *   Decoded:  hello world (11 bytes)
+ * @endcode
+ */
+char *qB64_encode(const void *bin, size_t size) {
+    const char B64CHARTBL[64] = {
+        'A','B','C','D','E','F','G','H','I','J','K','L','M','N','O','P', // 00-0F
+        'Q','R','S','T','U','V','W','X','Y','Z','a','b','c','d','e','f', // 10-1F
+        'g','h','i','j','k','l','m','n','o','p','q','r','s','t','u','v', // 20-2F
+        'w','x','y','z','0','1','2','3','4','5','6','7','8','9','+','/'  // 30-3F
+    };
+
+    if (size == 0) {
+        return strdup("");
+    }
+
+    // malloc for encoded string
+    char *pszB64 = (char *) malloc(
+            4 * ((size / 3) + ((size % 3 == 0) ? 0 : 1)) + 1);
+    if (pszB64 == NULL) {
+        return NULL;
+    }
+
+    char *pszB64Pt = pszB64;
+    unsigned char *pBinPt, *pBinEnd = (unsigned char *) (bin + size - 1);
+    unsigned char szIn[3] = { 0, 0, 0 };
+    int nOffset;
+    for (pBinPt = (unsigned char *) bin, nOffset = 0; pBinPt <= pBinEnd;
+            pBinPt++, nOffset++) {
+        int nIdxOfThree = nOffset % 3;
+        szIn[nIdxOfThree] = *pBinPt;
+        if (nIdxOfThree < 2 && pBinPt < pBinEnd)
+            continue;
+
+        *pszB64Pt++ = B64CHARTBL[((szIn[0] & 0xFC) >> 2)];
+        *pszB64Pt++ = B64CHARTBL[(((szIn[0] & 0x03) << 4)
+                | ((szIn[1] & 0xF0) >> 4))];
+        *pszB64Pt++ =
+                (nIdxOfThree >= 1) ?
+                        B64CHARTBL[(((szIn[1] & 0x0F) << 2)
+                                | ((szIn[2] & 0xC0) >> 6))] :
+                        '=';
+        *pszB64Pt++ = (nIdxOfThree >= 2) ? B64CHARTBL[(szIn[2] & 0x3F)] : '=';
+
+        memset((void *) szIn, 0, sizeof(szIn));
+    }
+    *pszB64Pt = '\0';
+
+    pszB64 = qstrreplace("tr", pszB64, "+", "~");
+    pszB64 = qstrreplace("tr", pszB64, "/", "_");
+    pszB64 = qstrreplace("tr", pszB64, "=", "^");
+
+    return pszB64;
+}
+
+/**
+ * Decode BASE64 encoded string.
+ *
+ * @param str   a pointer of Base64 encoded string.
+ *
+ * @return the length of bytes stored in the str memory in case of successful,
+ *         otherwise returns NULL
+ *
+ * @note
+ *  This modify str directly. And the 'str' is always terminated by NULL
+ *  character.
+ */
+size_t qB64_decode(char *str) {
+    const char B64MAPTBL[16 * 16] = {
+        64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,  // 00-0F
+        64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,  // 10-1F
+        64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 62, 64, 64, 64, 63,  // 20-2F
+        52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 64, 64, 64, 64, 64, 64,  // 30-3F
+        64,  0,  1,  2,  3,  4,  5,  6,  7,  8,  9, 10, 11, 12, 13, 14,  // 40-4F
+        15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 64, 64, 64, 64, 64,  // 50-5F
+        64, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40,  // 60-6F
+        41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 64, 64, 64, 64, 64,  // 70-7F
+        64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,  // 80-8F
+        64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,  // 90-9F
+        64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,  // A0-AF
+        64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,  // B0-BF
+        64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,  // C0-CF
+        64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,  // D0-DF
+        64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,  // E0-EF
+        64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64   // F0-FF
+    };
+
+    str = qstrreplace("tr", str, "~", "+");
+    str = qstrreplace("tr", str, "_", "/");
+    str = qstrreplace("tr", str, "^", "=");
+
+    char *pEncPt, *pBinPt = str;
+    int nIdxOfFour = 0;
+    char cLastByte = 0;
+    for (pEncPt = str; *pEncPt != '\0'; pEncPt++) {
+        char cByte = B64MAPTBL[(unsigned char) (*pEncPt)];
+        if (cByte == 64)
+            continue;
+
+        if (nIdxOfFour == 0) {
+            nIdxOfFour++;
+        } else if (nIdxOfFour == 1) {
+            // 00876543 0021????
+            //*pBinPt++ = ( ((cLastByte << 2) & 0xFC) | ((cByte >> 4) & 0x03) );
+            *pBinPt++ = ((cLastByte << 2) | (cByte >> 4));
+            nIdxOfFour++;
+        } else if (nIdxOfFour == 2) {
+            // 00??8765 004321??
+            //*pBinPt++ = ( ((cLastByte << 4) & 0xF0) | ((cByte >> 2) & 0x0F) );
+            *pBinPt++ = ((cLastByte << 4) | (cByte >> 2));
+            nIdxOfFour++;
+        } else {
+            // 00????87 00654321
+            //*pBinPt++ = ( ((cLastByte << 6) & 0xC0) | (cByte & 0x3F) );
+            *pBinPt++ = ((cLastByte << 6) | cByte);
+            nIdxOfFour = 0;
+        }
+
+        cLastByte = cByte;
+    }
+    *pBinPt = '\0';
+
+    return (pBinPt - str);
+}
+
+
+// Duplicate some small amount of code from toys/pending/sh.c
+// TODO - to be really useful I need to return the output.
+int runToy(char *argv[])
+{
+    int ret = 0;
+    struct toy_list *tl;
+    struct toy_context temp;
+    sigjmp_buf rebound;
+
+    if ((tl = toy_find(argv[0])) )//&& (tl->flags & (TOYFLAG_NOFORK|TOYFLAG_MAYFORK)))
+    {
+        // This fakes lots of what toybox_main() does.
+        memcpy(&temp, &toys, sizeof(struct toy_context));
+        memset(&toys, 0, sizeof(struct toy_context));
+
+        if (!sigsetjmp(rebound, 1))
+        {
+            toys.rebound = &rebound;
+            toy_init(tl, argv);  // argv must be null terminated
+            tl->toy_main();
+            xflush(0);
+        }
+        ret = toys.exitval;
+        if (toys.optargs != toys.argv+1) free(toys.optargs);
+        if (toys.old_umask) umask(toys.old_umask);
+        memcpy(&toys, &temp, sizeof(struct toy_context));
+    }
+
+    return ret;
+}
+
+
+#undef FALSE
+#undef TRUE
+#ifndef FALSE
+// NEVER change this, true and false work to.
+typedef enum
+{
+    FALSE       = 0,
+    TRUE        = 1
+} boolean;
+#endif
+
+
+
+// Silly "man getrandom" is bullshitting.
+// Note - this is Linux specific, it's calling a Linux kernel function.
+// Remove this when we have a real getrandom(), and replace it with -
+// #include <sys/random.h>
+#include <sys/syscall.h>
+#include <linux/random.h>
+int getrandom(void *b, size_t l, unsigned int f)
+{
+  return (int) syscall(SYS_getrandom, b, l, f);
+}
+
+
+
+typedef struct _gridStats gridStats;
+struct _gridStats
+{
+  float next;
+  struct timeval last;
+  qhashtbl_t *stats;
+};
+
+
+typedef struct _HTMLfile HTMLfile;
+struct _HTMLfile
+{
+  struct timespec last;
+  qlist_t *fragments;
+};
+qhashtbl_t *HTMLfileCache = NULL;
+
+
+typedef struct _reqData reqData;
+
+typedef void *(*pageFunction)           (char *file, reqData *Rd, HTMLfile *thisFile);
+typedef struct _dynPage dynPage;
+struct _dynPage
+{
+  char *name;
+  pageFunction func;
+};
+qhashtbl_t *dynPages;
+static void newDynPage(char *name, pageFunction func)
+{
+  dynPage *dp = xmalloc(sizeof(dynPage));
+  dp->name = name;      dp->func = func;
+  dynPages->put(dynPages, dp->name, dp, sizeof(dynPage));
+  free(dp);
+}
+
+
+#define HMACSIZE        EVP_MAX_MD_SIZE * 2
+#define HMACSIZE64      88
+
+// Session details about the logged in web user.  A sorta state machine.  Ish.
+enum reqSessionStatus   // Status of the session.  Refresh and wipe / nuke -> delete the old session file first.
+{
+  SHS_UNKNOWN = 0,      // Haven't looked at the session yet.                   -> validate it
+  SHS_NONE,             // No session at all.                                   -> logout
+  SHS_BOGUS,            // Looked at the session, it's bogus.                   -> nuke and logout
+  SHS_PROBLEM,          // Some other problem with the session.                 -> nuke and logout
+  SHS_VALID,            // Session is valid.                                    -> continue
+
+  SHS_LOGIN,            // User has just logged in, add UUID to session.        -> wipe, add UUID
+
+  SHS_RENEW,            // Refresh the session based on timer.                  -> continue
+  SHS_REFRESH,          // Refresh the session for other reason.                -> continue
+  SHS_IDLE,             // Session has been idle too long.                      -> relogin
+  SHS_ANCIENT,          // Session is way too old.                              -> nuke and logout
+
+  SHS_SECURITY,         // High security task needs users name & password.      -> 
+  SHS_RELOGIN,          // Ask user to login again.                             -> 
+
+  SHS_KEEP,             // Keep the session.                                    -> continue
+  SHS_WIPE,             // Wipe the session, use users UUID.                    -> continue
+  SHS_NUKE              // Wipe the session, no UUID.                           -> logout
+};
+
+typedef struct _sesh sesh;
+struct _sesh
+{
+  char  salt[256 + 1], seshID[256 + 1], 
+        sesh[256 + 16 + 10 + 1], munchie[HMACSIZE + 16 + 10 + 1], toke_n_munchie[HMACSIZE + 1], hashish[HMACSIZE + 1], 
+        leaf[HMACSIZE64 + 6 + 1], *UUID, *name;
+  struct timespec timeStamp[2];
+  short level;
+  enum reqSessionStatus status;
+  boolean isLinky;
+};
+
+// Details about the current web request.
+struct _reqData
+{
+  lua_State *L;
+  qhashtbl_t *configs, *queries, *body, *cookies, *headers, *valid, *stuff, *database, *Rcookies, *Rheaders;
+  char *Scheme, *Host, *Method, *Script, *Path, *RUri, *doit, *form, *output, *outQuery;
+  sesh shs, *lnk;
+  gridStats *stats;
+  qlist_t *errors, *messages;
+  qgrow_t *reply;
+  struct timespec then;
+  boolean fromDb;
+};
+
+static void showSesh(qgrow_t *reply, sesh *shs)
+{
+  if (shs->isLinky)
+    reply->addstrf(reply, "Linky:<br>\n<pre>\n");
+  else
+    reply->addstrf(reply, "Session:<br>\n<pre>\n");
+
+  if (NULL != shs->name)
+    reply->addstrf(reply, " &nbsp; name = %s\n", shs->name);
+  if (NULL != shs->UUID)
+    reply->addstrf(reply, " &nbsp; UUID = %s\n", shs->UUID);
+  reply->addstrf(reply,   " &nbsp; salt = %s\n", shs->salt);
+  reply->addstrf(reply,   " &nbsp; seshID = %s\n", shs->seshID);
+  reply->addstrf(reply,   " &nbsp; timeStamp = %ld.%ld\n", shs->timeStamp[1].tv_sec, shs->timeStamp[1].tv_nsec);
+  reply->addstrf(reply,   " &nbsp; sesh = %s\n", shs->sesh);
+  reply->addstrf(reply,   " &nbsp; munchie = %s\n", shs->munchie);
+  reply->addstrf(reply,   " &nbsp; toke_n_munchie = %s\n", shs->toke_n_munchie);
+  reply->addstrf(reply,   " &nbsp; hashish = %s\n", shs->hashish);
+  reply->addstrf(reply,   " &nbsp; leaf = %s\n", shs->leaf);
+  reply->addstrf(reply,   " &nbsp; level = %d\n", (int) shs->level);
+  reply->addstr(reply, "</pre>\n");
+}
+
+
+char toybuf[4096];
+lua_State *L;
+qhashtbl_t *configs;
+MYSQL *database, *dbconn;
+unsigned int dbTimeout;
+struct timespec dbLast;
+my_bool dbReconnect;
+gridStats *stats;
+boolean  isTmux = 0;
+boolean  isWeb = 0;
+char *pwd = "";
+char *scRoot = "/opt/opensim_SC";
+char *scUser = "opensimsc";
+char *scBin = "";
+char *scEtc = "";
+char *scLib = "";
+char *scRun = "";
+char *scBackup = "";
+char *scCache = "";
+char *scData = "";
+char *scLog = "";
+char *Tconsole = "SledjChisl";
+char *Tsocket = "opensim-tmux.socket";
+char *Ttab = "SC";
+char *Tcmd = "tmux -S";
+char *webRoot = "/var/www/html";
+char *URL = "fcgi-bin/sledjchisl.fcgi";
+char *ToS = "Be good.";
+char *webIframers = "";
+int  seshRenew    = 10 * 60;
+int  idleTimeOut  = 30 * 60;
+int  seshTimeOut  = 24 * 60 * 60;
+int newbieTimeOut = 30;
+float loadAverageInc = 0.5;
+int  simTimeOut = 45;
+boolean DEBUG = TRUE;
+qhashtbl_t *mimeTypes;
+qlist_t *dbRequests;
+
+
+// TODO - log to file.  The problem is we don't know where to log until after we have loaded the configs, and before that we are spewing log messages.
+//          Now that we are using spawn-fcgi, all the logs are going to STDERR, which we can capture and write to a file.
+//              Unfortunately spawn-fcgi in deamon mode sends all the output to /dev/null or something.
+//          A better idea, when we spawn tmux or spawn-fcgi, capture STDERR, full log everything to that, filtered log to the tmux console (STDOUT).
+//          Then we can use STDOUT / STDIN to run the console stuff.
+
+// TODO - escape anything that will turn the console into garbage.
+
+// https://stackoverflow.com/questions/4842424/list-of-ansi-color-escape-sequences
+char *logTypes[] =
+{
+  "91;1;4",     "CRITICAL",     // red underlined
+  "31",         "ERROR",        // dark red
+  "93",         "WARNING",      // yellow
+  "36",         "TIMEOUT",      // cyan
+  "97;40",      "INFO",         // white
+  "90",         "DEBUG",        // grey
+// VERBOSE?  UNKNOWN?  FATAL?  SILENT?  All from Android aparently.
+  "35",         "debug",        // magenta
+  "34",         "timeout",      // blue
+};
+
+#define DATE_TIME_LEN 42
+void logMe(int v, char *format, ...)
+{
+  va_list va, va2;
+  int len;
+  char *ret;
+  struct timeval tv;
+  time_t curtime;
+  char date[DATE_TIME_LEN];
+
+  va_start(va, format);
+  va_copy(va2, va);
+  // How long is it?
+  len = vsnprintf(0, 0, format, va);
+  len++;
+  va_end(va);
+  // Allocate and do the sprintf()
+  ret = xmalloc(len);
+  vsnprintf(ret, len, format, va2);
+  va_end(va2);
+
+  gettimeofday(&tv, NULL);
+  curtime = tv.tv_sec;
+  strftime(date, DATE_TIME_LEN, "(%Z %z) %F %T", localtime(&curtime));
+
+  v *= 2;
+  fprintf(stderr, "%s.%.6ld  \e[%sm%-8s sledjchisl: %s\e[0m\n", date, tv.tv_usec, logTypes[v], logTypes[v + 1], ret);
+  free(ret);
+}
+#define C(...) logMe(0, __VA_ARGS__)
+#define E(...) logMe(1, __VA_ARGS__)
+#define W(...) logMe(2, __VA_ARGS__)
+#define T(...) logMe(3, __VA_ARGS__)
+#define I(...) logMe(4, __VA_ARGS__)
+#define D(...) logMe(5, __VA_ARGS__)
+#define d(...) logMe(6, __VA_ARGS__)
+#define t(...) logMe(7, __VA_ARGS__)
+
+
+static void addStrL(qlist_t *list, char *s)
+{
+    list->addlast(list, s, strlen(s) + 1);
+}
+
+static char *getStrH(qhashtbl_t *hash, char *key)
+{
+  char *ret = "", *t;
+
+  t = hash->getstr(hash, key, false);
+  if (NULL != t)
+    ret = t;
+  return ret;
+}
+
+
+char *myHMAC(char *in, boolean b64)
+{
+  EVP_MD_CTX *mdctx = EVP_MD_CTX_create();      // Gets renamed to EVP_MD_CTX_new() in later versions.
+  unsigned char md_value[EVP_MAX_MD_SIZE];
+  unsigned int md_len;
+
+  EVP_DigestInit_ex(mdctx, EVP_sha512(), NULL); // EVP_sha3_512() isn't available until later versions.
+  EVP_DigestUpdate(mdctx, in, strlen(in));
+  EVP_DigestFinal_ex(mdctx, md_value, &md_len);
+  EVP_MD_CTX_destroy(mdctx);                    // Gets renamed to EVP_MD_CTX_free() in later versions.
+
+  if (b64)
+    return qB64_encode(md_value, md_len);
+  else
+    return qhex_encode(md_value, md_len);
+}
+
+char *myHMACkey(char *key, char *in, boolean b64)
+{
+  unsigned char md_value[EVP_MAX_MD_SIZE];
+  unsigned int md_len;
+  unsigned char* digest = HMAC(EVP_sha512(), key, strlen(key), (unsigned char *) in, strlen(in), md_value, &md_len);
+
+  if (b64)
+    return qB64_encode(md_value, md_len);
+  else
+    return qhex_encode(md_value, md_len);
+}
+
+
+// In Lua 5.0 reference manual is a table traversal example at page 29.
+void PrintTable(lua_State *L)
+{
+  lua_pushnil(L);
+
+  while (lua_next(L, -2) != 0)
+  {
+    // Numbers can convert to strings, so check for numbers before checking for strings.
+         if (lua_isnumber(L, -1))
+      printf("%s = %f\n", lua_tostring(L, -2), lua_tonumber(L, -1));
+    else if (lua_isstring(L, -1))
+      printf("%s = '%s'\n", lua_tostring(L, -2), lua_tostring(L, -1));
+    else if (lua_istable(L, -1))
+      PrintTable(L);
+    lua_pop(L, 1);
+  }
+}
+
+
+int sendTmuxKeys(char *dest, char *keys)
+{
+  int ret = 0, i;
+  char *c = xmprintf("%s %s/%s send-keys -t %s:%s '%s'", Tcmd, scRun, Tsocket, Tconsole, dest, keys);
+
+  i = system(c);
+  if (!WIFEXITED(i))
+    E("tmux send-keys command failed!");
+  free(c);
+  return ret;
+}
+
+int sendTmuxCmd(char *dest, char *cmd)
+{
+  int ret = 0, i;
+  char *c = xmprintf("%s %s/%s send-keys -t %s:'%s' '%s' Enter", Tcmd, scRun, Tsocket, Tconsole, dest, cmd);
+
+  i = system(c);
+  if (!WIFEXITED(i))
+    E("tmux send-keys command failed!");
+  free(c);
+  return ret;
+}
+
+void waitTmuxText(char *dest, char *text)
+{
+  int i;
+  // Using " for the grep pattern, coz ' might be used in a sim name.
+// TODO - should escape \ " ` in text.
+  char *c = xmprintf("sleep 5; %s %s/%s capture-pane -t %s:'%s' -p | grep -F \"%s\" 2>&1 > /dev/null", Tcmd, scRun, Tsocket, Tconsole, dest, text);
+
+  D("Waiting for '%s'.", text);
+  do
+  {
+    i = system(c);
+    if (!WIFEXITED(i))
+    {
+      E("tmux capture-pane command failed!");
+      break;
+    }
+    else if (0 == WEXITSTATUS(i))
+      break;
+  } while (1);
+
+  free(c);
+}
+
+float waitLoadAverage(float la, float extra, int timeout)
+{
+  struct sysinfo info;
+  struct timespec timeOut;
+  float  l;
+  int to = timeout;
+
+  T("Sleeping until load average is below %.02f (%.02f + %.02f) or for %d seconds.", la + extra, la, extra, timeout);
+  clock_gettime(CLOCK_MONOTONIC, &timeOut);
+  to += timeOut.tv_sec;
+
+  do
+  {
+    msleep(5000);
+    sysinfo(&info);
+    l = info.loads[0]/65536.0;
+    clock_gettime(CLOCK_MONOTONIC, &timeOut);
+    timeout -= 5;
+    t("Tick,          load average is       %.02f,           countdown %d seconds.", l, timeout);
+  } while (((la + extra) < l) && (timeOut.tv_sec < to));
+
+  return l;
+}
+
+
+// Rob forget to do this, but at least he didn't declare it static.
+struct dirtree *dirtree_handle_callback(struct dirtree *new, int (*callback)(struct dirtree *node));
+
+typedef struct _simList simList;
+struct _simList
+{
+  int len, num;
+  char **sims;
+};
+
+static int filterSims(struct dirtree *node)
+{
+    if (!node->parent) return DIRTREE_RECURSE | DIRTREE_SHUTUP;
+    if ((strncmp(node->name, "sim", 3) == 0) && ((strcmp(node->name, "sim_skeleton") != 0)))
+    {
+      simList *list = (simList *) node->parent->extra;
+
+      if ((list->num + 1) > list->len)
+      {
+        list->len = list->len + 1;
+        list->sims = xrealloc(list->sims, list->len * sizeof(char *));
+      }
+      list->sims[list->num] = xstrdup(node->name);
+      list->num++;
+    }
+    return 0;
+}
+
+// We particularly don't want \ " `
+char *cleanSimName(char *name)
+{
+  size_t l = strlen(name);
+  char *ret = xmalloc(l + 1);
+  int i, j = 0;
+
+  for (i = 0; i < l; i++)
+  {
+    char r = name[i];
+
+    if ((' ' == r) || (isalnum(r) != 0))
+      ret[j++] = r;
+  }
+  ret[j] = '\0';
+
+  return ret;
+}
+
+simList *getSims()
+{
+  simList *sims = xmalloc(sizeof(simList));
+  memset(sims, 0, sizeof(simList));
+  char *path = xmprintf("%s/config", scRoot);
+  struct dirtree *new = dirtree_add_node(0, path, 0);
+  new->extra = (long) sims;
+  dirtree_handle_callback(new, filterSims);
+
+  qsort(sims->sims, sims->num, sizeof(char *), qstrcmp);
+  free(path);
+  return sims;
+}
+
+void freeSimList(simList *sims)
+{
+  int i;
+
+  for (i = 0; i < sims->num; i++)
+    free(sims->sims[i]);
+  free(sims->sims);
+  free(sims);
+}
+
+static int filterInis(struct dirtree *node)
+{
+    if (!node->parent) return DIRTREE_RECURSE | DIRTREE_SHUTUP;
+    int l = strlen(node->name);
+    if (strncmp(&(node->name[l - 4]), ".ini", 4) == 0)
+    {
+      strcpy((char *) node->parent->extra, node->name);
+      return DIRTREE_ABORT;
+    }
+    return 0;
+}
+
+char *getSimName(char *sim)
+{
+  char *ret = NULL;
+  char *c = xmprintf("%s/config/%s", scRoot, sim);
+  struct dirtree *new = dirtree_add_node(0, c, 0);
+
+  free(c);
+  c = xzalloc(1024);
+  new->extra = (long) c;
+  dirtree_handle_callback(new, filterInis);
+  if ('\0' != c[0])
+  {
+    char *temp = NULL;
+    regex_t pat;
+    regmatch_t m[2];
+    long len;
+    int fd;
+
+    temp = xmprintf("%s/config/%s/%s", scRoot, sim, c);
+    fd = xopenro(temp);
+    xregcomp(&pat, "RegionName = \"(.+)\"", REG_EXTENDED);
+    do
+    {
+      // TODO - get_line() is slow, and wont help much with DOS and Mac line endings.
+      //        gio_gets() isn't any faster really, but deals with DOS line endings at least.
+      free(temp);
+      temp = get_line(fd);
+      if (temp)
+      {
+        if (!regexec(&pat, temp, 2, m, 0))
+        {
+          // Return first parenthesized subexpression as string.
+          if (pat.re_nsub > 0)
+          {
+            ret = xmprintf("%.*s", (int) (m[1].rm_eo - m[1].rm_so), temp + m[1].rm_so);
+            free(temp);
+            break;
+          }
+        }
+      }
+    } while (temp);
+    regfree(&pat);
+    xclose(fd);
+  }
+  free(c);
+  return ret;
+}
+
+
+// Expects either "simXX" or "ROBUST".
+int checkSimIsRunning(char *sim)
+{
+  int ret = 0;
+  struct stat st;
+
+  // Check if it's running.
+  char *path = xmprintf("%s/caches/%s.pid", scRoot, sim);
+  if (0 == stat(path, &st))
+  {
+    int fd, i;
+    char *pid = NULL;
+
+    // Double check if it's REALLY running.
+    if ((fd = xopenro(path)) == -1)
+      perror_msg("xopenro(%s)", path);
+    else
+    {
+      pid = get_line(fd);
+      if (NULL == pid)
+        perror_msg("get_line(%s)", path);
+      else
+      {
+        xclose(fd);
+
+// I'd rather re-use the toysh command running stuff, since ps is a toy, but that's private.
+// TODO - switch to toybox ps and rm.
+        free(path);
+        path = xmprintf("ps -p %s --no-headers -o comm", pid);
+        i = system(path);
+        if (WIFEXITED(i))
+        {
+          if (0 != WEXITSTATUS(i))      // No such pid.
+          {
+            free(path);
+            path = xmprintf("rm -f %s/caches/%s.pid", scRoot, sim);
+            d("%s", path);
+            i = system(path);
+          }
+          else
+            d("checkSimIsRunning(%s) has PID %s, which is actually running.", sim, pid);
+        }
+      }
+    }
+    free(pid);
+  }
+
+  // Now check if it's really really running.  lol
+  free(path);
+  path = xmprintf("%s/caches/%s.pid", scRoot, sim);
+  if (0 == stat(path, &st))
+  {
+    D("checkSimIsRunning(%s) -> %s is really really running.", sim, path);
+    ret = 1;
+  }
+  else
+    D("checkSimIsRunning(%s) -> %s is not running.", sim, path);
+
+  free(path);
+  return ret;
+}
+
+
+static void PrintEnv(qgrow_t *reply, char *label, char **envp)
+{
+  reply->addstrf(reply, "%s:<br>\n<pre>\n", label);
+  for ( ; *envp != NULL; envp++)
+    reply->addstrf(reply, "%s\n", *envp);
+  reply->addstr(reply, "</pre>\n");
+}
+
+static void printEnv(char **envp)
+{
+  for ( ; *envp != NULL; envp++)
+    D("%s", *envp);
+}
+
+
+typedef struct _rowData rowData;
+struct _rowData
+{
+  char **fieldNames;
+  qlist_t *rows;
+};
+
+static void dumpHash(qhashtbl_t *tbl)
+{
+  qhashtbl_obj_t obj;
+
+  memset((void*)&obj, 0, sizeof(obj));
+  tbl->lock(tbl);
+  while(tbl->getnext(tbl, &obj, true) == true)
+    d("%s = %s", obj.name, (char *) obj.data);
+  tbl->unlock(tbl);
+}
+
+static void dumpArray(int d, char **ar)
+{
+  int i = 0;
+
+  while (ar[i] != NULL)
+  {
+    d("%d %d %s", d, i, ar[i]);
+    i++;
+  }
+}
+
+
+
+typedef struct _dbFields dbFields;
+struct _dbFields
+{
+  qlisttbl_t *flds;
+  int count;
+};
+typedef struct _dbField  dbField;
+struct _dbField
+{
+  char *name;
+  enum enum_field_types type;
+  unsigned long length;
+  unsigned int  flags;
+  unsigned int  decimals;
+};
+
+void dbFreeFields(dbFields *flds, boolean all)
+{
+  flds->count--;
+
+// TODO - sigh, looks to be inconsistant why some do and some don't leak.
+//          I guess the ones that don't leak are the ones that crash?
+//          It's only a tiny leak anyway, 80 bytes total.
+//  if ((0 >= flds->count) || all)      // CRASHY
+  if ((0 >= flds->count))               // LEAKY
+  {
+    qlisttbl_obj_t obj;
+
+    memset((void *) &obj, 0, sizeof(obj));
+    flds->flds->lock(flds->flds);
+    while(flds->flds->getnext(flds->flds, &obj, NULL, false) == true)
+    {
+      dbField *fld = (dbField *) obj.data;
+      free(fld->name);
+    }
+    flds->flds->unlock(flds->flds);
+    flds->flds->free(flds->flds);
+    flds->flds = NULL;
+    free(flds);
+  }
+}
+
+enum dbCommandType
+{
+  CT_SELECT,
+  CT_CREATE,
+  CT_UPDATE,
+  CT_NONE
+};
+
+typedef struct _dbRequest dbRequest;
+struct _dbRequest
+{
+  char *table, *join, *where, *order, *sql;
+  MYSQL_STMT *prep;             // NOTE - executing it stores state in this.
+  dbFields *fields;
+  int inCount, outCount, rowCount;
+  char **inParams, **outParams;
+  MYSQL_BIND *inBind, *outBind;
+  rowData *rows;
+  my_ulonglong count;
+  enum dbCommandType type;
+  boolean freeOutParams;
+};
+
+void dbFreeRequest(dbRequest *req, boolean all)
+{
+  int i;
+
+  D("Cleaning up prepared database request %s - %s   %d %d", req->table, req->where, req->outCount, req->inCount);
+
+  if (NULL != req->outBind)
+  {
+    for (i = 0; i < req->outCount; i++)
+    {
+      if (NULL != req->outBind[i].buffer)       free(req->outBind[i].buffer);
+      if (NULL != req->outBind[i].length)       free(req->outBind[i].length);
+      if (NULL != req->outBind[i].error)        free(req->outBind[i].error);
+      if (NULL != req->outBind[i].is_null)      free(req->outBind[i].is_null);
+    }
+    free(req->outBind);
+    req->outBind = NULL;
+  }
+  else
+    D("  No out binds to clean up for %s - %s.", req->table, req->where);
+  if (NULL != req->inBind)
+  {
+    for (i = 0; i < req->inCount; i++)
+    {
+      if (NULL != req->inBind[i].buffer)        free(req->inBind[i].buffer);
+      if (NULL != req->inBind[i].length)        free(req->inBind[i].length);
+      if (NULL != req->inBind[i].error)         free(req->inBind[i].error);
+      if (NULL != req->inBind[i].is_null)       free(req->inBind[i].is_null);
+    }
+    free(req->inBind);
+    req->inBind = NULL;
+  }
+  else
+    D("  No in binds to clean up for %s - %s.", req->table, req->where);
+
+  if (req->freeOutParams && all)
+  {
+    if (NULL != req->outParams)
+    {
+      free(req->outParams);
+      req->outParams = NULL;
+    }
+    else
+      D("  No out params to clean up for %s - %s.", req->table, req->where);
+  }
+  if (NULL != req->sql)         free(req->sql);
+  else
+    D("  No SQL to clean up for %s - %s.", req->table, req->where);
+  req->sql = NULL;
+  if (NULL != req->prep)
+  {
+    if (0 != mysql_stmt_close(req->prep))
+      C("  Unable to close the prepared statement!");
+    req->prep = NULL;
+  }
+
+  if (all)
+  {
+    if (NULL != req->fields)
+    {
+      dbFreeFields(req->fields, all);
+      req->fields = NULL;
+    }
+    else
+      D("  No fields to clean up for %s - %s.", req->table, req->where);
+  }
+}
+
+void freeDb(boolean all)
+{
+  dbRequest **rq;
+
+  if (dbRequests)
+  {
+    if (all)
+    {
+      while (NULL != (rq = (dbRequest **) dbRequests->popfirst(dbRequests, NULL)))
+      {
+        dbFreeRequest(*rq, all);
+        free(rq);
+      }
+      dbRequests->free(dbRequests);
+      dbRequests = NULL;
+    }
+    else
+    {
+      qlist_obj_t obj;
+
+      memset((void*)&obj, 0, sizeof(obj)); // must be cleared before call
+      dbRequests->lock(dbRequests);
+      while (dbRequests->getnext(dbRequests, &obj, false) == true)
+        dbFreeRequest(*((dbRequest **) obj.data), all);
+      dbRequests->unlock(dbRequests);
+    }
+  }
+
+  if (database)         mysql_close(database);
+  database = NULL;
+  mysql_library_end();
+}
+
+static boolean dbConnect()
+{
+    database = mysql_init(NULL);
+    if (NULL == database)
+    {
+      E("mysql_init() failed - %s", mysql_error(database));
+      return FALSE;
+    }
+
+/* TODO - dammit, no mysql_get_option(), MariaDB docs say mysql_get_optionv(), which doesn't exist either.
+            Says "This function was added in MariaDB Connector/C 3.0.0.", I have MariaDB / MySQL client version: 10.1.44-MariaDB.
+
+  if (mysql_get_option(database, MYSQL_OPT_CONNECT_TIMEOUT, &dbTimeout))
+    E("mysql_get_option(MYSQL_OPT_CONNECT_TIMEOUT) failed - %s", mysql_error(database));
+  else
+    D("Database MYSQL_OPT_CONNECT_TIMEOUT = %d", dbTimeout);
+
+  if (mysql_get_option(database, MYSQL_OPT_RECONNECT, &dbReconnect))
+    E("mysql_get_option(MYSQL_OPT_RECONNECT) failed - %s", mysql_error(database));
+  else
+    D("Database MYSQL_OPT_RECONNECT = %d", (int) dbReconnect);
+*/
+
+  // Seems best to disable auto-reconnect, so I have more control over reconnections.
+  dbReconnect = 0;
+  if (mysql_options(database, MYSQL_OPT_RECONNECT, &dbReconnect))
+    E("mysql_options(MYSQL_OPT_RECONNECT) failed - %s", mysql_error(database));
+  else
+    D("Database MYSQL_OPT_RECONNECT is now %d", (int) dbReconnect);
+
+  dbconn = mysql_real_connect(database,
+                            getStrH(configs, "Data Source"),
+                            getStrH(configs, "User ID"),
+                            getStrH(configs, "Password"),
+                            getStrH(configs, "Database"),
+//                          3036, "/var/run/mysqld/mysqld.sock",
+                            0, NULL,
+                            CLIENT_FOUND_ROWS | CLIENT_LOCAL_FILES | CLIENT_MULTI_STATEMENTS | CLIENT_MULTI_RESULTS);
+  if (NULL == dbconn)
+  {
+    E("mysql_real_connect() failed - %s", mysql_error(database));
+    return FALSE;
+  }
+
+  // Just set the fucking thing to a year.  Pffft.
+  dbTimeout = 60 * 60 * 24 * 7 * 52;
+  char *sql = xmprintf("SET SESSION wait_timeout=%d", (int) dbTimeout);
+
+  if (mysql_query(database, sql))
+    E("SET SESSION wait_timeout=%d failed - %s", (int) dbTimeout, mysql_error(database));
+  else
+    D("Database wait_timeout = %d", (int) dbTimeout);
+  free(sql);
+
+  if (-1 == clock_gettime(CLOCK_REALTIME, &dbLast))
+    perror_msg("Unable to get the time.");
+
+  return TRUE;
+}
+
+// A general error function that checks for certain errors that mean we should try to connect to the server MariaDB again.
+//    https://mariadb.com/kb/en/mariadb-error-codes/
+//    1129?  1152?  1184?  1218?  1927  3032?  4150?  
+//    "server has gone away" isn't listed there, that's the one I was getting.  Pffft
+//      It's 2006, https://dev.mysql.com/doc/refman/8.0/en/gone-away.html
+//      Ah it could be "connection inactive for 8 hours".
+//          Which might be why OpenSim opens a new connection for EVERYTHING.
+//    https://dev.mysql.com/doc/refman/5.7/en/c-api-auto-reconnect.html
+//      Has more details.
+static boolean dbCheckError(char *error, char *sql)
+{
+  int e = mysql_errno(database);
+
+  E("MariaDB error %d - %s: %s\n%s", e, error, mysql_error(database), sql);
+  if (2006 == e)
+  {
+    W("Reconnecting to database.");
+    freeDb(false);
+    return dbConnect();
+  }
+
+  return FALSE;
+}
+// "Statement execute failed 2013: Lost connection to MySQL server during query"
+static boolean dbStmtCheckError(dbRequest *req, char *error, char *sql)
+{
+  int e = mysql_stmt_errno(req->prep);
+
+  E("MariaDB prepared statement error %d - %s: %s\n%s", e, error, mysql_stmt_error(req->prep), sql);
+  if (2013 == e)
+  {
+    W("Reconnecting to database.");
+    freeDb(false);
+    return dbConnect();
+  }
+
+  return FALSE;
+}
+
+dbFields *dbGetFields(char *table)
+{
+  static qhashtbl_t *tables = NULL;
+  if (NULL == tables)   tables = qhashtbl(0, 0);
+  dbFields *ret = tables->get(tables, table, NULL, false);
+
+  if (NULL == ret)
+  {
+    // Seems the only way to get field metadata is to actually perform a SQL statement, then you get the field metadata for the result set.
+    //   Chicken, meet egg, sorry you had to cross the road for this.
+    char *sql = xmprintf("SELECT * FROM %s LIMIT 0", table);
+
+d("Getting field metadata for %s", table);
+    if (mysql_query(database, sql))
+    {
+//      E("MariaDB error %d - Query failed 0: %s\n%s", mysql_errno(database), mysql_error(database), sql);
+      if (dbCheckError("Query failed 0", sql))
+      {
+        ret = dbGetFields(table);
+        free(sql);
+        return ret;
+      }
+    }
+    else
+    {
+      MYSQL_RES *res = mysql_store_result(database);
+
+      if (!res)
+        E("MariaDB error %d - Couldn't get results set from %s\n %s", mysql_errno(database), mysql_error(database), sql);
+      else
+      {
+        MYSQL_FIELD *fields = mysql_fetch_fields(res);
+
+        if (!fields)
+          E("MariaDB error %d - Failed fetching fields: %s", mysql_errno(database), mysql_error(database));
+        else
+        {
+          unsigned int i, num_fields = mysql_num_fields(res);
+
+          ret = xmalloc(sizeof(dbFields));                                      // Little bit LEAKY
+          ret->flds = qlisttbl(QLISTTBL_UNIQUE | QLISTTBL_LOOKUPFORWARD);
+          ret->count = 1;
+          for (i = 0; i < num_fields; i++)
+          {
+            dbField *fld  = xmalloc(sizeof(dbField));
+            fld->name     = xstrdup(fields[i].name);
+            fld->type     =     fields[i].type;
+            fld->length   =     fields[i].length;
+            fld->flags    =     fields[i].flags;
+            fld->decimals =     fields[i].decimals;
+            ret->flds->put(ret->flds, fld->name, fld, sizeof(*fld));
+            free(fld);
+          }
+          tables->put(tables, table, ret, sizeof(*ret));
+        }
+        mysql_free_result(res);
+      }
+    }
+    free(sql);
+  }
+  else  // Reference count these, coz some tables are used more than once.
+    ret->count++;
+
+  return ret;
+}
+
+
+/*  How to deal with prepared SQL statements.
+http://karlssonondatabases.blogspot.com/2010/07/prepared-statements-are-they-useful-or.html
+https://blog.cotten.io/a-taste-of-mysql-in-c-87c5de84a31d?gi=ab3dd1425b29
+https://raspberry-projects.com/pi/programming-in-c/databases-programming-in-c/mysql/accessing-the-database
+
+IG and CG now both have sims connected to other grids, so some sort of
+multi database solution would be good, then we can run the grid and the
+external sims all in one.
+
+Not sure if this'll work with Count(*).
+
+---------------------------------------------
+
+The complicated bit is the binds.
+
+You are binding field values to C memory locations.
+The parameters and returned fields need binds.
+Mostly seems to be the value parts of the SQL statements.
+
+I suspect most will be of the form - 
+  ... WHERE x=? and foo=?
+  INSERT INTO table VALUES (?,?,?)
+  UPDATE table SET x=?, foo=? WHERE id=?
+
+  A multi table update -
+  UPDATE items,month SET items.price=month.price WHERE items.id=month.id;
+*/
+
+int dbDoSomething(dbRequest *req, boolean count, ...)
+{
+  int ret = 0;
+  va_list ap;
+  struct timespec then;
+  int i, j;
+  MYSQL_RES *prepare_meta_result = NULL;
+
+  if (-1 == clock_gettime(CLOCK_REALTIME, &then))
+    perror_msg("Unable to get the time.");
+
+// TODO - should factor this out to it's own function, and call that function in dbCount() and dbCountJoin().
+//          Or better yet, finally migrate those functions to using dbDoSomething().
+  double n = (dbLast.tv_sec * 1000000000.0) + dbLast.tv_nsec;
+  double t = (then.tv_sec * 1000000000.0) + then.tv_nsec;
+
+t("Database timeout test %lf > %lf", ((t - n) / 1000000000.0), (dbTimeout / 2.0));
+  if (((t - n) / 1000000000.0) > (dbTimeout / 2.0))
+  {
+    T("Avoid database timeout of %d seconds, pinging it.", dbTimeout);
+    if (0 != mysql_ping(database))
+    {
+      W("Reconnecting to database.");
+      freeDb(false);
+      dbConnect();
+    }
+  }
+
+  va_start(ap, count);
+
+  if (NULL == req->prep)
+  {
+    D("Creating prepared statement for %s - %s", req->table, req->where);
+
+    if (0 == req->type)
+        req->type = CT_SELECT;
+
+    req->fields = dbGetFields(req->table);
+    if (NULL == req->fields)
+    {
+      E("Unknown fields for table %s.", req->table);
+      ret++;
+      goto end;
+    }
+
+    switch (req->type)
+    {
+      case CT_SELECT :
+      {
+        char *select = xmprintf("");
+
+        i = 0;
+        while (req->outParams[i] != NULL)
+        {
+          char *t = xmprintf("%s,%s", select, req->outParams[i]);
+          free(select);
+          select = t;
+          i++;
+        }
+        if (0 == i)
+        {
+          free(select);
+          if (count)
+            select = xmprintf(",Count(*)");
+          else
+            select = xmprintf(",*");
+        }
+
+        if (NULL == req->join)
+          req->join = "";
+
+        if (req->where)
+          req->sql = xmprintf("SELECT %s FROM %s %s WHERE %s", &select[1], req->table, req->join, req->where);
+        else
+          req->sql = xmprintf("SELECT %s FROM %s", &select[1], req->table, req->join);
+        free(select);
+        if (req->order)
+        {
+          char *t = xmprintf("%s ORDER BY %s", req->sql, req->order);
+
+          free(req->sql);
+          req->sql = t;
+        }
+        break;
+      }
+
+      case CT_CREATE :
+      {
+        char *values = xmprintf("");
+
+        i = 0;
+        while (req->inParams[i] != NULL)
+        {
+          char *t = xmprintf("%s, %s=?", values, req->inParams[i]);
+          free(values);
+          values = t;
+          i++;
+        }
+        if (0 == i)
+        {
+          E("Statement prepare for INSERT must have in paramaters.");
+          ret++;
+          free(values);
+          values = xmprintf("");
+        }
+        req->sql = xmprintf("INSERT INTO %s SET %s", req->table, &values[1]);
+        free(values);
+
+        break;
+      }
+
+      case CT_UPDATE :
+      {
+        break;
+      }
+
+      case CT_NONE :
+      {
+        W("No SQL type!");
+        break;
+      }
+    }
+
+d("New SQL statement - %s", req->sql);
+    // prepare statement with the other fields
+    req->prep = mysql_stmt_init(database);
+    if (NULL == req->prep)
+    {
+      E("Statement prepare init failed: %s\n", mysql_stmt_error(req->prep));
+      ret++;
+      goto end;
+    }
+    if (mysql_stmt_prepare(req->prep, req->sql, strlen(req->sql)))
+    {
+      E("Statement prepare failed: %s\n", mysql_stmt_error(req->prep));
+      ret++;
+      goto end;
+    }
+
+    // setup the bind stuff for any "?" parameters in the SQL.
+    req->inCount = mysql_stmt_param_count(req->prep);
+    i = 0;
+    while (req->inParams[i] != NULL)
+      i++;
+    if (i != req->inCount)
+    {
+      E("In parameters count don't match %d != %d for - %s", i, req->inCount, req->sql);
+      ret++;
+      goto freeIt;
+    }
+    req->inBind = xzalloc(i * sizeof(MYSQL_BIND));
+//W("Allocated %d %d inBinds for %s", i, req->inCount, req->sql);
+    for (i = 0; i < req->inCount; i++)
+    {
+      dbField *fld = req->fields->flds->get(req->fields->flds, req->inParams[i], NULL, false);
+
+      if (NULL == fld)
+      {
+        E("Unknown input field %d %s.%s for - %s", i, req->table, req->inParams[i], req->sql);
+        ret++;
+        goto freeIt;
+      }
+      else
+      {
+        // https://blog.cotten.io/a-taste-of-mysql-in-c-87c5de84a31d?gi=ab3dd1425b29
+        //   For some gotchas about all of this binding bit.
+        req->inBind[i].buffer_type      = fld->type;
+        req->inBind[i].buffer           = xzalloc(fld->length + 1);  // Note the + 1 is for string types, and a waste for the rest.
+        req->inBind[i].buffer_length    = fld->length + 1;
+        switch(fld->type)
+        {
+          case MYSQL_TYPE_TINY:
+          {
+//d("TINY %d %s %d", i, fld->name, req->inBind[i].buffer_length);
+            break;
+          }
+
+          case MYSQL_TYPE_SHORT:
+          {
+            req->inBind[i].is_unsigned  = FALSE;
+//d("SHORT %d %s %d", i, fld->name, req->inBind[i].buffer_length);
+            break;
+          }
+
+          case MYSQL_TYPE_INT24:
+          {
+            req->inBind[i].is_unsigned  = FALSE;
+//d("INT24 %d %s %d", i, fld->name, req->inBind[i].buffer_length);
+            break;
+          }
+
+          case MYSQL_TYPE_LONG:
+          {
+            req->inBind[i].is_unsigned  = FALSE;
+//d("LONG %d %s %d", i, fld->name, req->inBind[i].buffer_length);
+            break;
+          }
+
+          case MYSQL_TYPE_LONGLONG:
+          {
+            req->inBind[i].is_unsigned  = FALSE;
+//d("LONGLONG %d %s %d", i, fld->name, req->inBind[i].buffer_length);
+            break;
+          }
+
+          case MYSQL_TYPE_FLOAT:
+          {
+//d("FLOAT %d %s %d", i, fld->name, req->inBind[i].buffer_length);
+            break;
+          }
+
+          case MYSQL_TYPE_DOUBLE:
+          {
+//d("DOUBLE %d %s %d", i, fld->name, req->inBind[i].buffer_length);
+            break;
+          }
+
+          case MYSQL_TYPE_NEWDECIMAL:
+          {
+//d("NEWDECIMAL %d %s %d", i, fld->name, req->inBind[i].buffer_length);
+            break;
+          }
+
+          case MYSQL_TYPE_TIME:
+          case MYSQL_TYPE_DATE:
+          case MYSQL_TYPE_DATETIME:
+          case MYSQL_TYPE_TIMESTAMP:
+          {
+//d("DATE / TIME ish %d %s %d", i, fld->name, req->inBind[i].buffer_length);
+            break;
+          }
+
+          case MYSQL_TYPE_STRING:
+          case MYSQL_TYPE_VAR_STRING:
+          {
+//d("STRING / VARSTRING %d %s %d", i, fld->name, req->inBind[i].buffer_length);
+            req->inBind[i].is_null      = xzalloc(sizeof(my_bool));
+            req->inBind[i].length       = xzalloc(sizeof(unsigned long));
+            break;
+          }
+
+          case MYSQL_TYPE_TINY_BLOB:
+          case MYSQL_TYPE_BLOB:
+          case MYSQL_TYPE_MEDIUM_BLOB:
+          case MYSQL_TYPE_LONG_BLOB:
+          {
+//d("BLOBs %d %s %d", i, fld->name, req->inBind[i].buffer_length);
+            req->inBind[i].is_null      = xzalloc(sizeof(my_bool));
+            break;
+          }
+
+          case MYSQL_TYPE_BIT:
+          {
+            req->inBind[i].is_null      = xzalloc(sizeof(my_bool));
+//d("BIT %d %s %d", i, fld->name, req->inBind[i].buffer_length);
+            break;
+          }
+
+          case MYSQL_TYPE_NULL:
+          {
+//d("NULL %d %s %d", i, fld->name, req->inBind[i].buffer_length);
+            break;
+          }
+        }
+      }
+    }
+
+// TODO - if this is not a count, setup result bind paramateres, may be needed for counts as well.
+    if (CT_SELECT == req->type)
+    {
+      prepare_meta_result = mysql_stmt_result_metadata(req->prep);
+      if (!prepare_meta_result)
+      {
+        E(" mysql_stmt_result_metadata() error %d, returned no meta information - %s\n", mysql_stmt_errno(req->prep), mysql_stmt_error(req->prep));
+        ret++;
+        goto freeIt;
+      }
+    }
+
+    if (count)
+    {
+I("count!!!!!!!!!!!!!!!!");
+    }
+    else if (CT_SELECT == req->type)
+    {
+      req->outCount = mysql_num_fields(prepare_meta_result);
+      i = 0;
+      while (req->outParams[i] != NULL)
+        i++;
+      if (0 == i)       // Passing in {NULL} as req->outParams means "return all of them".
+      {
+        req->outParams = xzalloc((req->outCount + 1) * sizeof(char *));
+        req->freeOutParams = TRUE;
+        qlisttbl_obj_t obj;
+        memset((void*)&obj, 0, sizeof(obj));
+        req->fields->flds->lock(req->fields->flds);
+        while (req->fields->flds->getnext(req->fields->flds, &obj, NULL, false) == true)
+        {
+          dbField *fld = (dbField *) obj.data;
+          req->outParams[i] = fld->name;
+          i++;
+        }
+        req->outParams[i] = NULL;
+        req->fields->flds->unlock(req->fields->flds);
+      }
+      if (i != req->outCount)
+      {
+        E("Out parameters count doesn't match %d != %d foqr - %s", i, req->outCount, req->sql);
+        ret++;
+        goto freeIt;
+      }
+      req->outBind = xzalloc(i * sizeof(MYSQL_BIND));
+//W("Allocated %d %d outBinds for %s", i, req->outCount, req->sql);
+      for (i = 0; i < req->outCount; i++)
+      {
+        dbField *fld = req->fields->flds->get(req->fields->flds, req->outParams[i], NULL, false);
+
+        if (NULL == fld)
+        {
+          E("Unknown output field %d %s.%s foqr - %s", i, req->table, req->outParams[i], req->sql);
+          ret++;
+          goto freeIt;
+        }
+        else
+        {
+          // https://blog.cotten.io/a-taste-of-mysql-in-c-87c5de84a31d?gi=ab3dd1425b29
+          //   For some gotchas about all of this binding bit.
+          req->outBind[i].buffer_type   = fld->type;
+          req->outBind[i].buffer        = xzalloc(fld->length + 1);  // Note the + 1 is for string types, and a waste for the rest.
+          req->outBind[i].buffer_length = fld->length + 1;
+          req->outBind[i].error         = xzalloc(sizeof(my_bool));
+          req->outBind[i].is_null       = xzalloc(sizeof(my_bool));
+          switch(fld->type)
+          {
+            case MYSQL_TYPE_TINY:
+            {
+//d("TINY %d %s %d", i, fld->name, req->outBind[i].buffer_length);
+              break;
+            }
+
+            case MYSQL_TYPE_SHORT:
+            {
+//d("SHORT %s %d", fld->name, req->outBind[i].buffer_length);
+              req->outBind[i].is_unsigned       = FALSE;
+              break;
+            }
+
+            case MYSQL_TYPE_INT24:
+            {
+//d("INT24 %s %d", fld->name, req->outBind[i].buffer_length);
+              req->outBind[i].is_unsigned       = FALSE;
+              break;
+            }
+
+            case MYSQL_TYPE_LONG:
+            {
+//d("LONG %d %s %d", i, fld->name, req->outBind[i].buffer_length);
+              req->outBind[i].is_unsigned       = FALSE;
+              break;
+            }
+
+            case MYSQL_TYPE_LONGLONG:
+            {
+//d("LONGLONG %s %d", fld->name, req->outBind[i].buffer_length);
+              req->outBind[i].is_unsigned       = FALSE;
+              break;
+            }
+
+            case MYSQL_TYPE_FLOAT:
+            {
+//d("FLOAT %s %d", fld->name, req->outBind[i].buffer_length);
+              break;
+            }
+
+            case MYSQL_TYPE_DOUBLE:
+            {
+//d("DOUBLE %s %d", fld->name, req->outBind[i].buffer_length);
+              break;
+            }
+
+            case MYSQL_TYPE_NEWDECIMAL:
+            {
+//d("NEWDECIMAL %s %d", fld->name, req->outBind[i].buffer_length);
+              break;
+            }
+
+            case MYSQL_TYPE_TIME:
+            case MYSQL_TYPE_DATE:
+            case MYSQL_TYPE_DATETIME:
+            case MYSQL_TYPE_TIMESTAMP:
+            {
+//d("DATE / TIME ish %s %d", fld->name, req->outBind[i].buffer_length);
+              break;
+            }
+
+            case MYSQL_TYPE_STRING:
+            case MYSQL_TYPE_VAR_STRING:
+            {
+//d("STRING / VARSTRING %s %d", fld->name, req->outBind[i].buffer_length);
+              req->outBind[i].length    = xzalloc(sizeof(unsigned long));
+              break;
+            }
+
+            case MYSQL_TYPE_TINY_BLOB:
+            case MYSQL_TYPE_BLOB:
+            case MYSQL_TYPE_MEDIUM_BLOB:
+            case MYSQL_TYPE_LONG_BLOB:
+            {
+//d("BLOBs %s %d", fld->name, req->outBind[i].buffer_length);
+              break;
+            }
+
+            case MYSQL_TYPE_BIT:
+            {
+//d("BIT %s %d", fld->name, req->outBind[i].buffer_length);
+              break;
+            }
+
+            case MYSQL_TYPE_NULL:
+            {
+//d("NULL %s %d", fld->name, req->outBind[i].buffer_length);
+              break;
+            }
+          }
+        }
+      }
+      if (mysql_stmt_bind_result(req->prep, req->outBind))
+      {
+        E("Bind failed error %d.", mysql_stmt_errno(req->prep));
+        ret++;
+        goto freeIt;
+      }
+    }
+  }
+
+
+//d("input bind for %s", req->sql);
+  for (i = 0; i < req->inCount; i++)
+  {
+    dbField *fld = req->fields->flds->get(req->fields->flds, req->inParams[i], NULL, false);
+
+    if (NULL == fld)
+    {
+      E("Unknown input field %s.%s for - %s", req->table, req->inParams[i], req->sql);
+      ret++;
+      goto freeIt;
+    }
+    else
+    {
+      switch(fld->type)
+      {
+        case MYSQL_TYPE_TINY:
+        {
+          int c = va_arg(ap, int);
+          signed char d = (signed char) c;
+
+          memcpy(req->inBind[i].buffer, &d, (size_t) fld->length);
+//T("TINY %d %s %d", i, fld->name, req->inBind[i].buffer_length);
+          break;
+        }
+
+        case MYSQL_TYPE_SHORT:
+        {
+          int c = va_arg(ap, int);
+          short int d = (short int) c;
+
+          memcpy(req->inBind[i].buffer, &d, (size_t) fld->length);
+//T("SHORT %d %s %d = %d", i, fld->name, req->inBind[i].buffer_length, c);
+          break;
+        }
+
+        case MYSQL_TYPE_INT24:
+        {
+          int d = va_arg(ap, int);
+
+          memcpy(req->inBind[i].buffer, &d, (size_t) fld->length);
+//T("INT24 %d %s %d - %d", i, fld->name, req->inBind[i].buffer_length, d);
+          break;
+        }
+
+        case MYSQL_TYPE_LONG:
+        {
+          long d = va_arg(ap, long);
+
+          memcpy(req->inBind[i].buffer, &d, (size_t) fld->length);
+//T("LONG %d %s %d = %ld", i, fld->name, req->inBind[i].buffer_length, d);
+          break;
+        }
+
+        case MYSQL_TYPE_LONGLONG:
+        {
+          long long int d = va_arg(ap, long long int);
+
+          memcpy(req->inBind[i].buffer, &d, (size_t) fld->length);
+//T("LONGLONG %d %s %d = %lld", i, fld->name, req->inBind[i].buffer_length, d);
+          break;
+        }
+
+        case MYSQL_TYPE_FLOAT:
+        {
+          double c = va_arg(ap, double);
+          float d = (float) c;
+
+          memcpy(req->inBind[i].buffer, &d, (size_t) fld->length);
+//T("FLOAT %d %s %d = %f", i, fld->name, req->inBind[i].buffer_length, d);
+          break;
+        }
+
+        case MYSQL_TYPE_DOUBLE:
+        {
+          double d = va_arg(ap, double);
+
+          memcpy(req->inBind[i].buffer, &d, (size_t) fld->length);
+//T("DOUBLE %d %s %d = %f", i, fld->name, req->inBind[i].buffer_length, d);
+          break;
+        }
+
+        case MYSQL_TYPE_NEWDECIMAL:
+        {
+//T("NEWDECIMAL %d %s %d", i, fld->name, req->inBind[i].buffer_length);
+          break;
+        }
+
+        case MYSQL_TYPE_TIME:
+        case MYSQL_TYPE_DATE:
+        case MYSQL_TYPE_DATETIME:
+        case MYSQL_TYPE_TIMESTAMP:
+        {
+          MYSQL_TIME d = va_arg(ap, MYSQL_TIME);
+
+          memcpy(req->inBind[i].buffer, &d, (size_t) fld->length);
+//T("DATE / TIME ish %d %s %d", i, fld->name, req->inBind[i].buffer_length);
+          break;
+        }
+
+        case MYSQL_TYPE_STRING:
+        case MYSQL_TYPE_VAR_STRING:
+        {
+          char *d = va_arg(ap, char *);
+          unsigned long l = strlen(d);
+
+          if (l > fld->length)
+            l = fld->length;
+          *(req->inBind[i].length) = l;
+          strncpy(req->inBind[i].buffer, d, (size_t) l);
+          ((char *) req->inBind[i].buffer)[l] = '\0';
+//T("STRING / VARSTRING %d %s %d = %s", i, fld->name, req->inBind[i].buffer_length, d);
+          break;
+        }
+
+        case MYSQL_TYPE_TINY_BLOB:
+        case MYSQL_TYPE_BLOB:
+        case MYSQL_TYPE_MEDIUM_BLOB:
+        case MYSQL_TYPE_LONG_BLOB:
+        {
+// TODO - should write this, we will likely need it.  Main problem is - how long is this blob?  Probably should add a length param before the blob.
+//T("BLOBs %d %s %d", i, fld->name, req->inBind[i].buffer_length);
+          break;
+        }
+
+        case MYSQL_TYPE_BIT:
+        {
+//T("BIT %d %s %d", i, fld->name, req->inBind[i].buffer_length);
+          break;
+        }
+
+        case MYSQL_TYPE_NULL:
+        {
+//T("NULL %d %s %d", i, fld->name, req->inBind[i].buffer_length);
+          break;
+        }
+      }
+    }
+  }
+  if (mysql_stmt_bind_param(req->prep, req->inBind))
+  {
+    E("Bind failed error %d.", mysql_stmt_errno(req->prep));
+    ret++;
+    goto freeIt;
+  }
+
+
+//d("Execute %s", req->sql);
+
+  // do the prepared statement req->prep.
+  if (mysql_stmt_execute(req->prep))
+  {
+    if (dbStmtCheckError(req, "Statement failed 0", req->sql))
+    {
+      ret++;
+      goto freeIt;
+    }
+  }
+
+  int fs = mysql_stmt_field_count(req->prep);
+  // stuff results back into req.
+  if (NULL != req->outBind)
+  {
+    req->rows = xmalloc(sizeof(rowData));
+    req->rows->fieldNames = xzalloc(fs * sizeof(char *));
+    if (mysql_stmt_store_result(req->prep))
+    {
+      E(" mysql_stmt_store_result() failed %d: %s", mysql_stmt_errno(req->prep), mysql_stmt_error(req->prep));
+      ret++;
+      goto freeIt;
+    }
+    req->rowCount = mysql_stmt_num_rows(req->prep);
+    if (0 == req->rowCount)
+      D("No rows returned from : %s\n", req->sql);
+    else
+      D("%d rows of %d fields returned from : %s\n", req->rowCount, fs, req->sql);
+
+    req->rows->rows = qlist(0);
+    while (MYSQL_NO_DATA != mysql_stmt_fetch(req->prep))
+    {
+      qhashtbl_t *flds = qhashtbl(0, 0);
+
+      for (i = 0; i < req->outCount; i++)
+      {
+        dbField *fld = req->fields->flds->get(req->fields->flds, req->outParams[i], NULL, false);
+
+        req->rows->fieldNames[i] = fld->name;
+        if (!*(req->outBind[i].is_null))
+        {
+//d("2.8 %s", req->rows->fieldNames[i]);
+          flds->put(flds, req->rows->fieldNames[i], req->outBind[i].buffer, req->outBind[i].buffer_length);
+
+          switch(fld->type)
+          {
+            case MYSQL_TYPE_TINY:
+            {
+              break;
+            }
+
+            case MYSQL_TYPE_SHORT:
+            {
+              char *t = xmprintf("%d", (int) *((int *) req->outBind[i].buffer));
+              flds->putstr(flds, req->rows->fieldNames[i], t);
+              free(t);
+              break;
+            }
+
+            case MYSQL_TYPE_INT24:
+            {
+              char *t = xmprintf("%d", (int) *((int *) req->outBind[i].buffer));
+              flds->putstr(flds, req->rows->fieldNames[i], t);
+              free(t);
+              break;
+            }
+
+            case MYSQL_TYPE_LONG:
+            {
+              if (NULL == req->outBind[i].buffer)
+              {
+                E("Field %d %s is NULL", i, fld->name);
+                ret++;
+                goto freeIt;
+              }
+              char *t = xmprintf("%d", (int) *((int *) (req->outBind[i].buffer)));
+//d("Setting %i %s %s", i, fld->name, t);
+              flds->putstr(flds, req->rows->fieldNames[i], t);
+              free(t);
+              break;
+            }
+
+            case MYSQL_TYPE_LONGLONG:
+            {
+              char *t = xmprintf("%d", (int) *((int *) req->outBind[i].buffer));
+              flds->putstr(flds, req->rows->fieldNames[i], t);
+              free(t);
+              break;
+            }
+
+            case MYSQL_TYPE_FLOAT:
+            {
+              break;
+            }
+
+            case MYSQL_TYPE_DOUBLE:
+            {
+              break;
+            }
+
+            case MYSQL_TYPE_NEWDECIMAL:
+            {
+              break;
+            }
+
+            case MYSQL_TYPE_TIME:
+            case MYSQL_TYPE_DATE:
+            case MYSQL_TYPE_DATETIME:
+            case MYSQL_TYPE_TIMESTAMP:
+            {
+              break;
+            }
+
+            case MYSQL_TYPE_STRING:
+            case MYSQL_TYPE_VAR_STRING:
+            {
+              break;
+            }
+
+            case MYSQL_TYPE_TINY_BLOB:
+            case MYSQL_TYPE_BLOB:
+            case MYSQL_TYPE_MEDIUM_BLOB:
+            case MYSQL_TYPE_LONG_BLOB:
+            { 
+              break;
+            }
+
+            case MYSQL_TYPE_BIT:
+            {
+              break;
+            }
+
+            case MYSQL_TYPE_NULL:
+            {
+              break;
+            }
+          }
+        }
+        else
+          D("Not setting data %s, coz it's NULL", fld->name);
+      }
+      req->rows->rows->addlast(req->rows->rows, flds, sizeof(qhashtbl_t));
+      free(flds);
+    }
+  }
+
+freeIt:
+  if (prepare_meta_result)
+    mysql_free_result(prepare_meta_result);
+  if (mysql_stmt_free_result(req->prep))
+  {
+    E("Statement result freeing failed %d: %s\n", mysql_stmt_errno(req->prep), mysql_stmt_error(req->prep));
+    ret++;
+  }
+
+end:
+  va_end(ap);
+
+  if (-1 == clock_gettime(CLOCK_REALTIME, &dbLast))
+    perror_msg("Unable to get the time.");
+  n = (dbLast.tv_sec * 1000000000.0) + dbLast.tv_nsec;
+  T("dbDoSomething(%s) took %lf seconds", req->sql, (n - t) / 1000000000.0);
+
+  return ret;
+}
+
+// Copy the SQL results into the request structure.
+void dbPull(reqData *Rd, char *table, rowData *rows)
+{
+  char *where;
+  qhashtbl_t *me = rows->rows->popfirst(rows->rows, NULL);
+  qhashtbl_obj_t obj;
+
+  if (NULL != me)
+  {
+    memset((void*)&obj, 0, sizeof(obj));
+    me->lock(me);
+    while(me->getnext(me, &obj, false) == true)
+    {
+      where = xmprintf("%s.%s", table, obj.name);
+d("dbPull(Rd->database) %s = %s", where, (char *) obj.data);
+      Rd->database->putstr(Rd->database, where, (char *) obj.data);
+      free(where);
+    }
+    me->unlock(me);
+    me->free(me);
+  }
+  free(rows->fieldNames);
+  rows->rows->free(rows->rows);
+  free(rows);
+}
+
+my_ulonglong dbCount(char *table, char *where)
+{
+  my_ulonglong ret = 0;
+  char *sql;
+  struct timespec now, then;
+
+  if (-1 == clock_gettime(CLOCK_REALTIME, &then))
+    perror_msg("Unable to get the time.");
+
+  if (where)
+    sql = xmprintf("SELECT Count(*) FROM %s WHERE %s", table, where);
+  else
+    sql = xmprintf("SELECT Count(*) FROM %s", table);
+
+  if (mysql_query(database, sql))
+  {
+//    E("MariaDB error %d - Query failed 1: %s", mysql_errno(database), mysql_error(database));
+    if (dbCheckError("Query failed 1", sql))
+    {
+      ret = dbCount(table, where);
+      free(sql);
+      return ret;
+    }
+  }
+  else
+  {
+    MYSQL_RES *result = mysql_store_result(database);
+
+    if (!result)
+      E("Couldn't get results set from %s\n: %s", sql, mysql_error(database));
+    else
+    {
+      MYSQL_ROW row = mysql_fetch_row(result);
+      if (!row)
+        E("MariaDB error %d - Couldn't get row from %s\n: %s", mysql_errno(database), sql, mysql_error(database));
+      else
+        ret = atoll(row[0]);
+      mysql_free_result(result);
+    }
+  }
+
+  if (-1 == clock_gettime(CLOCK_REALTIME, &now))
+    perror_msg("Unable to get the time.");
+  double n = (now.tv_sec * 1000000000.0) + now.tv_nsec;
+  double t = (then.tv_sec * 1000000000.0) + then.tv_nsec;
+//  T("dbCount(%s) took %lf seconds", sql, (n - t) / 1000000000.0);
+  free(sql);
+  return ret;
+}
+
+my_ulonglong dbCountJoin(char *table, char *select, char *join, char *where)
+{
+  my_ulonglong ret = 0;
+  char *sql;
+  struct timespec now, then;
+
+  if (-1 == clock_gettime(CLOCK_REALTIME, &then))
+    perror_msg("Unable to get the time.");
+
+  if (NULL == select)
+    select = "*";
+  if (NULL == join)
+    join = "";
+
+  if (where)
+    sql = xmprintf("SELECT %s FROM %s %s WHERE %s", select, table, join, where);
+  else
+    sql = xmprintf("SELECT %s FROM %s", select, table, join);
+
+  if (mysql_query(database, sql))
+  {
+//    E("MariaDB error %d - Query failed 2: %s", mysql_errno(database), mysql_error(database));
+    if (dbCheckError("Query failed 2", sql))
+    {
+      ret = dbCountJoin(table, select, join, where);
+      free(sql);
+      return ret;
+    }
+  }
+  else
+  {
+    MYSQL_RES *result = mysql_store_result(database);
+
+    if (!result)
+      E("MariaDB error %d - Couldn't get results set from %s\n: %s", mysql_errno(database), sql, mysql_error(database));
+    else
+      ret = mysql_num_rows(result);
+    mysql_free_result(result);
+  }
+
+  if (-1 == clock_gettime(CLOCK_REALTIME, &now))
+    perror_msg("Unable to get the time.");
+  double n = (now.tv_sec * 1000000000.0) + now.tv_nsec;
+  double t = (then.tv_sec * 1000000000.0) + then.tv_nsec;
+//  T("dbCointJoin(%s) took %lf seconds", sql, (n - t) / 1000000000.0);
+  free(sql);
+  return ret;
+}
+
+
+void replaceStr(qhashtbl_t *ssi, char *key, char *value)
+{
+  ssi->putstr(ssi, key, value);
+}
+
+void replaceLong(qhashtbl_t *ssi, char *key, my_ulonglong value)
+{
+  char *tmp = xmprintf("%lu", value);
+
+  replaceStr(ssi, key, tmp);
+  free(tmp);
+}
+
+
+float timeDiff(struct timeval *now, struct timeval *then)
+{
+  if (0 == gettimeofday(now, NULL))
+  {
+    struct timeval thisTime = { 0, 0 };
+    double  result = 0.0;
+
+    thisTime.tv_sec = now->tv_sec;
+    thisTime.tv_usec = now->tv_usec;
+    if (thisTime.tv_usec < then->tv_usec)
+    {
+      thisTime.tv_sec--;
+      thisTime.tv_usec += 1000000;
+    }
+    thisTime.tv_usec -= then->tv_usec;
+    thisTime.tv_sec -= then->tv_sec;
+    result = ((double) thisTime.tv_usec) / ((double) 1000000.0);
+    result += thisTime.tv_sec;
+    return result;
+  }
+
+  return 0.0;
+}
+
+
+gridStats *getStats(MYSQL *db, gridStats *stats)
+{
+  if (NULL == stats)
+  {
+    stats = xmalloc(sizeof(gridStats));
+    stats->next = 30;
+    gettimeofday(&(stats->last), NULL);
+    stats->stats = qhashtbl(0, 0);
+    stats->stats->putstr(stats->stats, "version",       "SledjChisl FCGI Dev 0.1");
+    stats->stats->putstr(stats->stats, "grid",          "my grid");
+    stats->stats->putstr(stats->stats, "uri",           "http://localhost:8002/");
+    if (checkSimIsRunning("ROBUST"))
+      stats->stats->putstr(stats->stats, "gridOnline",  "online");
+    else
+      stats->stats->putstr(stats->stats, "gridOnline",  "offline");
+  }
+  else
+  {
+    static struct timeval thisTime;
+    if (stats->next > timeDiff(&thisTime, &(stats->last)))
+      return stats;
+  }
+
+  I("Getting fresh grid stats.");
+  if (checkSimIsRunning("ROBUST"))
+    replaceStr(stats->stats, "gridOnline", "online");
+  else
+    replaceStr(stats->stats, "gridOnline", "offline");
+
+  char *tmp;
+  my_ulonglong locIn = dbCount("Presence", "RegionID != '00000000-0000-0000-0000-000000000000'");       // Locals online but not HGing, and HGers in world.
+  my_ulonglong HGin  = dbCount("Presence", "UserID NOT IN (SELECT PrincipalID FROM UserAccounts)");     // HGers in world.
+
+  // Collect stats about members.
+  replaceLong(stats->stats, "hgers", HGin);
+  if (locIn >= HGin)    // Does OpenSim have too many ghosts?
+    replaceLong(stats->stats, "inworld", locIn - HGin);
+  else
+    replaceLong(stats->stats, "inworld", 0);
+  tmp = xmprintf("GridExternalName != '%s'", stats->stats->getstr(stats->stats, "uri", false));
+  replaceLong(stats->stats, "outworld", dbCount("hg_traveling_data", tmp));
+  free(tmp);
+  replaceLong(stats->stats, "members", dbCount("UserAccounts", NULL));
+
+  // Count local and HG visitors for the last 30 and 60 days.
+  locIn = dbCountJoin("GridUser", "GridUser.UserID", "INNER JOIN UserAccounts ON GridUser.UserID = UserAccounts.PrincipalID", 
+                        "Login > UNIX_TIMESTAMP(FROM_UNIXTIME(UNIX_TIMESTAMP(now()) - 2419200))");
+  HGin  = dbCount("GridUser", "Login > UNIX_TIMESTAMP(FROM_UNIXTIME(UNIX_TIMESTAMP(now()) - 2419200))");
+  replaceLong(stats->stats, "locDay30", locIn);
+  replaceLong(stats->stats, "day30", HGin);
+  replaceLong(stats->stats, "HGday30", HGin - locIn);
+
+  locIn = dbCountJoin("GridUser", "GridUser.UserID", "INNER JOIN UserAccounts ON GridUser.UserID = UserAccounts.PrincipalID", 
+                            "Login > UNIX_TIMESTAMP(FROM_UNIXTIME(UNIX_TIMESTAMP(now()) - 4838400))");
+  HGin  = dbCount("GridUser", "Login > UNIX_TIMESTAMP(FROM_UNIXTIME(UNIX_TIMESTAMP(now()) - 4838400))");
+  replaceLong(stats->stats, "locDay60", locIn);
+  replaceLong(stats->stats, "day60", HGin);
+  replaceLong(stats->stats, "HGday60", HGin - locIn);
+
+  // Collect stats about sims.
+  replaceLong(stats->stats, "sims",        dbCount("regions", NULL));
+  replaceLong(stats->stats, "onlineSims",  dbCount("regions", "sizeX != 0"));
+  replaceLong(stats->stats, "varRegions",  dbCount("regions", "sizeX > 256 or sizeY > 256"));
+  replaceLong(stats->stats, "singleSims",  dbCount("regions", "sizeX = 256 and sizeY = 256"));
+  replaceLong(stats->stats, "offlineSims", dbCount("regions", "sizeX = 0"));
+
+  // Calculate total size of all regions.
+  my_ulonglong simSize = 0;
+  static dbRequest *rgnSizes = NULL;
+  if (NULL == rgnSizes)
+  {
+    static char *szi[] = {NULL};
+    static char *szo[] = {"sizeX", "sizeY", NULL};
+    rgnSizes = xzalloc(sizeof(dbRequest));
+    rgnSizes->table = "regions";
+    rgnSizes->inParams  = szi;
+    rgnSizes->outParams = szo;
+    rgnSizes->where = "sizeX != 0";
+    dbRequests->addfirst(dbRequests, &rgnSizes, sizeof(dbRequest *));
+  }
+  dbDoSomething(rgnSizes, FALSE);                                       // LEAKY
+  rowData *rows = rgnSizes->rows;
+
+  qhashtbl_t *row;
+  while (NULL != (row = rows->rows->getat(rows->rows, 0, NULL, true)))
+  {
+    my_ulonglong x = 0, y = 0;
+
+    tmp = row->getstr(row, "sizeX", false);
+    if (NULL == tmp)
+      E("No regions.sizeX!");
+    else
+      x = atoll(tmp);
+    tmp = row->getstr(row, "sizeY", false);
+    if (NULL == tmp)
+      E("No regions.sizeY!");
+    else
+      y = atoll(tmp);
+    simSize += x * y;
+    row->free(row);
+    rows->rows->removefirst(rows->rows);
+  }
+  free(rows->fieldNames);
+  rows->rows->free(rows->rows);
+  free(rows);
+
+  tmp = xmprintf("%lu", simSize);
+  stats->stats->putstr(stats->stats, "simsSize", tmp);
+  free(tmp);
+  gettimeofday(&(stats->last), NULL);
+
+  return stats;
+}
+
+
+qhashtbl_t *toknize(char *text, char *delims)
+{
+  qhashtbl_t *ret = qhashtbl(0, 0);
+
+  if (NULL == text)
+    return ret;
+
+  char *txt = xstrdup(text), *token, dlm = ' ', *key, *val = NULL;
+  int offset = 0;
+
+  while((token = qstrtok(txt, delims, &dlm, &offset)) != NULL)
+  {
+    if (delims[0] == dlm)
+    {
+      key = token;
+      val = &txt[offset];
+    }
+    else if (delims[1] == dlm)
+    {
+      ret->putstr(ret, qstrtrim_head(key), token);
+d("  %s = %s", qstrtrim_head(key), val);
+      val = NULL;
+    }
+  }
+  if (NULL != val)
+{
+    ret->putstr(ret, qstrtrim_head(key), val);
+d("  %s = %s", qstrtrim_head(key), val);
+}
+  free(txt);
+  return ret;
+}
+
+void santize(qhashtbl_t *tbl)
+{
+  qhashtbl_obj_t obj;
+
+  memset((void*)&obj, 0, sizeof(obj));
+  tbl->lock(tbl);
+  while(tbl->getnext(tbl, &obj, false) == true)
+  {
+    char *n = obj.name, *o = (char *) obj.data;
+
+    qurl_decode(o);
+    tbl->putstr(tbl, n, o);
+  }
+  tbl->unlock(tbl);
+}
+
+void outize(qgrow_t *reply, qhashtbl_t *tbl, char *label)
+{
+  reply->addstrf(reply, "%s:<br>\n<pre>\n", label);
+  qhashtbl_obj_t obj;
+  memset((void*)&obj, 0, sizeof(obj));
+  tbl->lock(tbl);
+  while(tbl->getnext(tbl, &obj, false) == true)
+    reply->addstrf(reply, " &nbsp; %s = %s\n", obj.name, (char *) obj.data);
+  tbl->unlock(tbl);
+  reply->addstr(reply, "</pre>\n");
+}
+
+// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie
+enum cookieSame
+{
+  CS_NOT,
+  CS_STRICT,
+  CS_LAX,       // Apparently the default set by browsers these days.
+  CS_NONE
+};
+typedef struct _cookie cookie;
+struct _cookie
+{
+  char *value, *domain, *path;
+  //  char *expires;    // Use maxAge instead, it's far simpler to figure out.
+  int maxAge;
+  boolean secure, httpOnly;
+  enum cookieSame site;
+};
+
+void freeCookie(reqData *Rd, char *cki)
+{
+  cookie *ck0 = Rd->Rcookies->get(Rd->Rcookies, cki, NULL, false);
+
+  if (NULL != ck0)
+  {
+    if (NULL != ck0->value)
+      free(ck0->value);
+    Rd->Rcookies->remove(Rd->Rcookies, cki);
+  }
+}
+
+cookie *setCookie(reqData *Rd, char *cki, char *value)
+{
+  cookie *ret = xzalloc(sizeof(cookie));
+  char *cook = xstrdup(cki);
+  int l, i;
+
+// TODO - would URL encoding do the trick?
+  // Validate this, as there is a limited set of characters allowed.
+  qstrreplace("tr", cook, "()<>@,;:\\\"/[]?={} \t", "_");
+  freeCookie(Rd, cook);
+  l = strlen(cook);
+  for (i = 0; i < l; i++)
+  {
+    if (iscntrl(cook[i]) != 0)
+      cook[i] = '_';
+  }
+  l = strlen(value);
+  if (0 != l)
+    ret->value = qurl_encode(value, l);
+  else
+    ret->value = xstrdup("");
+  ret->httpOnly = TRUE;
+  ret->site = CS_STRICT;
+  ret->secure = TRUE;
+  ret->path = getStrH(Rd->headers, "SCRIPT_NAME");
+  Rd->Rcookies->put(Rd->Rcookies, cook, ret, sizeof(cookie));
+  free(ret);
+  ret = Rd->Rcookies->get(Rd->Rcookies, cook, NULL, false);
+  free(cook);
+  return ret;
+}
+
+char *getCookie(qhashtbl_t *cookies, char *cki)
+{
+  char *ret = NULL;
+  cookie *ck = (cookie *) cookies->get(cookies, cki, NULL, false);
+
+  if (NULL != ck)
+    ret = ck->value;
+  return ret;
+}
+
+void outizeCookie(qgrow_t *reply, qhashtbl_t *tbl, char *label)
+{
+  reply->addstrf(reply, "%s:<br>\n<pre>\n", label);
+  qhashtbl_obj_t obj;
+  memset((void*)&obj, 0, sizeof(obj));
+  tbl->lock(tbl);
+  while(tbl->getnext(tbl, &obj, false) == true)
+    reply->addstrf(reply, " &nbsp; %s = %s\n", obj.name, ((cookie *) obj.data)->value);
+  tbl->unlock(tbl);
+  reply->addstr(reply, "</pre>\n");
+}
+
+void list2cookie(reqData *Rd, char *cki, qlist_t *list)
+{
+  char *t0 = xstrdup("");
+  qlist_obj_t obj;
+
+  memset((void*)&obj, 0, sizeof(obj)); // must be cleared before call
+  list->lock(list);
+  while (list->getnext(list, &obj, false) == true)
+  {
+    char *t1 = xmprintf("%s\n%s", t0, (char *) obj.data);
+
+    free(t0);
+    t0 = t1;
+  }
+  list->unlock(list);
+  setCookie(Rd, cki, &t0[1]);   // Skip the first empty one.
+// TODO - should set a very short maxAge.
+  free(t0);
+}
+
+qlist_t *cookie2list(qhashtbl_t *cookies, char *cki)
+{
+  qlist_t *ret = NULL;
+  cookie *ck = (cookie *) cookies->get(cookies, cki, NULL, false);
+
+  if (NULL != ck)
+  {
+    if (NULL != ck->value)
+    {
+      qurl_decode(ck->value);
+      ret = qstrtokenizer(ck->value, "\n");
+      free(ck->value);
+    }
+// TODO - should send the "delete this cookie" thing to the browser.
+    cookies->remove(cookies, cki);
+  }
+  return ret;
+}
+
+
+enum fragmentType
+{
+ FT_TEXT,
+ FT_PARAM,
+ FT_LUA
+};
+
+typedef struct _fragment fragment;
+struct _fragment
+{
+  enum fragmentType type;
+  int length;
+  char *text;
+};
+
+static void HTMLdebug(qgrow_t *reply)
+{
+  reply->addstrf(reply,
+    "      <p class='hoverItem'>\n"
+    "        <div class='hoverWrapper0'>\n"
+    "          <p>DEBUG</p>\n"
+    "          <div id='hoverShow0'>\n"
+    "            <h1>DEBUG log</h1>\n"
+    "            <!--#echo var=\"DEBUG\" -->\n"
+    "          </div>\n"
+    "        </div>\n"
+    "      </p>\n"
+  );
+}
+
+static void HTMLheader(qgrow_t *reply, char *title)
+{
+  reply->addstrf(reply,
+    "<html>\n"
+    "  <head>\n"
+    "    <title>%s</title>\n"
+    "    <meta charset=\"UTF-8\">\n"
+    "    <link rel=\"shortcut icon\" href=\"/SledjHamrIconSmall.png\">\n"
+    , title);
+  reply->addstrf(reply, "    <link type='text/css' rel='stylesheet' href='/SledjChisl.css' media='all' />\n");
+
+  if (DEBUG)
+    reply->addstrf(reply, "    <link type='text/css' rel='stylesheet' href='/debugStyle.css' media='all' />\n");
+
+  reply->addstrf(reply,
+    "    <style> \n"
+    "      html, body {background-color: black; color: white; font-family: 'sans-serif'; margin: 0; padding: 0;}\n"
+    "      a:link {color: aqua;}\n"
+    "      a:visited {color: fuchsia;}\n"
+    "      a:hover {color: blue;}\n"
+    "      a:active {color: red;}\n"
+    "      button {background-color: darkgreen; color: white; font-family: 'sans-serif';}\n"
+    "      button:hover {color: blue;}\n"
+    "      button:active {color: red;}\n"
+    "      label {background-color:darkgreen; color: white; font-family: 'sans-serif'; font-size: 160%;}\n"
+    "      input {background-color:darkblue; color: white; font-family: 'sans-serif'; font-size: 80%;}\n"
+    // What idiot thought aligning the label with the bottom of textareas was a good default?
+    "      textarea {background-color:darkblue; color: white; font-family: 'sans-serif'; font-size: 80%; vertical-align: top;}\n"
+    "    </style>\n"
+    "  </head>\n"
+    "  <body bgcolor='black' text='white' link='aqua' vlink='fuchsia' alink='red'>\n"
+    "  <font face='sans-serif'>\n"
+    );
+  reply->addstrf(reply, "    <div class='top-left'>\n");
+  if (DEBUG)
+    HTMLdebug(reply);
+}
+
+// TODO - maybe escape non printables as well?
+char *HTMLentities[] =
+{
+  "", "", "", "", "", "", "", "", "",                                                   // NUL SOH STX ETX EOT ENQ ACK BEL BS
+  "&Tab;", "&NewLine;",
+  "", "", "", "", "", "", "", "", "", "", "", "", "", "", "", "", "", "", "", "", "",   // VT FF CR SO SI DLE DC1 DC2 DC3 DC4 NAK SYN ETB CAN EM SUB ESC FS GS RS US
+  " ",  // Space
+  "&excl;", "&quot;",
+  "&num;", "&dollar;",
+  "&percnt;", "&amp;",
+  "&apos;",
+  "&lpar;", "&rpar;",
+  "&ast;",
+  "&plus;",
+  "&comma;",
+  "-",
+  "&period;",
+  "&sol;",
+  "0", "1", "2", "3", "4", "5", "6", "7", "8", "9",
+  "&colon;", "&semi;",
+  "&lt;", "&equals;", "&gt;",
+  "&quest;",
+  "&commat;",
+  "A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z",
+  "&lsqb;", "&bsol;", "&rsqb;",
+  "&Hat;",
+  "&lowbar;",
+  "&grave;",
+  "a", "b", "c", "d", "e", "f", "g", "h", "i", "j", "k", "l", "m", "n", "o", "p", "q", "r", "s", "t", "u", "v", "w", "x", "y", "z",
+  "&lcub;", "&verbar;", "&rcub;",
+  "~",
+  "",   // DEL
+  "&nbsp;"      // This is actually 160, not 128, but I hack around that.
+};
+static void HTMLescapeString(qgrow_t *reply, char *string)
+{
+  size_t l = strlen(string);
+  char *t = xmalloc(l * 10 + 1);
+  int i, j = 0;
+  boolean space = FALSE;
+
+  for (i = 0; i < l; i++)
+  {
+    int s = string[i];
+
+    // Alternate long line of spaces with space and &nbsp;.
+    if (' ' == s)
+    {
+      if (space)
+      {
+        s = 128;
+        space = FALSE;
+      }
+      else
+        space = TRUE;
+    }
+    else
+    {
+      space = FALSE;
+      if (128 == s)     // The real 128 character.
+      {
+        t[j++] = ' ';
+        continue;
+      }
+    }
+
+    if (128 >= s)
+    {
+      char *r = HTMLentities[s];
+      size_t m = strlen(r);
+      int k;
+
+      for (k = 0; k < m; k++)
+        t[j++] = r[k];
+    }
+    else
+        t[j++] = ' ';
+  }
+  t[j] = '\0';
+  reply->addstr(reply, t);
+  free(t);
+}
+
+static void HTMLtable(qgrow_t *reply, MYSQL *db, MYSQL_RES *result, char *caption, char *URL, char *id)
+{
+  char *tbl = "";
+  char *address, *addrend, *t, *t0;
+  int count = 0, c = -1, i;
+  MYSQL_ROW row;
+  MYSQL_FIELD *fields = mysql_fetch_fields(result);
+
+  reply->addstrf(reply, "<table border=\"1\"><caption>%s</caption>\n", caption);
+
+  if (!fields)
+    E("Failed fetching fields: %s", mysql_error(db));
+  while ((row = mysql_fetch_row(result)))
+  {
+    reply->addstr(reply, "<tr>"); 
+    address = xmprintf("");
+    addrend = "";
+
+    if (-1 == c)
+      c = mysql_num_fields(result);
+
+    if (0 == count)
+    {
+      for (i = 0; i < c; i++)
+      {
+        char *s = fields[i].name;
+
+        reply->addstrf(reply, "<th>%s</th>", s);
+      }
+      reply->addstr(reply, "</tr>\n<tr>"); 
+    }
+
+    if (NULL != URL)
+    {
+      free(address);
+      address = xmprintf("<a href=\"%s", URL);
+      addrend = "</a>";
+    }
+
+    for (i = 0; i < c; i++)
+    {
+      char *s = fields[i].name;
+
+      t0 = row[i];
+      if (NULL == t0)
+        E("No field %s!", s);
+      else
+      {
+        if ((NULL != id) && (strcmp(s, id) == 0))
+          reply->addstrf(reply, "<td>%s&%s=%s\">%s%s</td>", address, id, t0, t0, addrend);
+        else
+          reply->addstrf(reply, "<td>%s</td>", t0);
+      }
+    }
+    reply->addstr(reply, "</tr>\n");
+
+    free(address);
+    count++;
+  }
+
+  reply->addstr(reply, "</table>");
+  mysql_free_result(result);
+}
+
+static void HTMLhidden(qgrow_t *reply, char *name, char *val)
+{
+  if ((NULL != val) && ("" != val))
+  {
+    reply->addstrf(reply, "      <input type=\"hidden\" name=\"%s\" value=\"", name);
+    HTMLescapeString(reply, val);
+    reply->addstr(reply, "\">\n");
+  }
+}
+
+static void HTMLform(qgrow_t *reply, char *action, char *token)
+{
+  reply->addstrf(reply, "    <form action=\"%s\" method=\"POST\">\n", action);
+  if ((NULL != token) && ('\0' != token[0]))
+    HTMLhidden(reply, "munchie", token);
+}
+static void HTMLformEnd(qgrow_t *reply)
+{
+  reply->addstrf(reply, "    </form>\n");
+}
+
+static void HTMLcheckBox(qgrow_t *reply, char *name, char *title, boolean checked, boolean required)
+{
+  // HTML is an absolute fucking horror.  This is so that we got an off sent to us if the checkbox is off, otherwise we get nothing.
+  HTMLhidden(reply, name, "off");
+  reply->addstrf(reply, "      <p>");
+  reply->addstrf(reply, "<label><input type=\"checkbox\" name=\"%s\"", name);
+  if (checked)
+    reply->addstrf(reply, " checked", name);
+//  if (required)
+//    reply->addstr(reply, " required");
+  reply->addstrf(reply, "> %s </label>", title);
+//  reply->addstrf(reply, "> %s  ⛝  □  🞐   🞎   🞎   ☐  ▣️ ◉  ○  </label>", title);
+  reply->addstrf(reply, "</p>\n"); 
+}
+
+static void HTMLtextArea(qgrow_t *reply, char *name, char *title, int rows, int cols, int min, int max, char *holder, char *comp, char *spell, char *wrap, char *val, boolean required, boolean readOnly)
+{
+  reply->addstrf(reply, "      <p><label>%s : <textarea name=\"%s\"", title, name);
+  if (0 < rows)
+    reply->addstrf(reply, " rows=\"%d\"", rows); 
+  if (0 < cols)
+    reply->addstrf(reply, " cols=\"%d\"", cols); 
+  if (0 < min)
+    reply->addstrf(reply, " minlength=\"%d\"", min); 
+  if (0 < max)
+    reply->addstrf(reply, " maxlength=\"%d\"", max); 
+  if (required)
+    reply->addstr(reply, " required");
+  if (readOnly)
+    reply->addstr(reply, " readonly");
+  if ("" != holder)
+    reply->addstrf(reply, " placeholder=\"%s\"", holder);
+  if ("" != comp)
+    reply->addstrf(reply, " autocomplete=\"%s\"", comp);
+  if ("" != spell)
+    reply->addstrf(reply, " spellcheck=\"%s\"", spell);
+  if ("" != wrap)
+    reply->addstrf(reply, " wrap=\"%s\"", wrap);
+  if ((NULL != val) && ("" != val))
+  {
+    reply->addstr(reply, ">");
+    HTMLescapeString(reply, val);
+    reply->addstr(reply, "</textarea></label></p>\n");
+  }
+  else
+    reply->addstrf(reply, "></textarea></label></p>\n");
+}
+
+static void HTMLtext(qgrow_t *reply, char *type, char *title, char *name, char *val, int size, int max, boolean required)
+{
+  reply->addstrf(reply, "      <p><label>%s : <input type=\"%s\" name=\"%s\"", title, type, name);
+  if ((NULL != val) && ("" != val))
+  {
+    reply->addstr(reply, " value=\"");
+    HTMLescapeString(reply, val);
+    reply->addstr(reply, "\"");
+  }
+  if (0 < size)
+    reply->addstrf(reply, " size=\"%d\"", size); 
+  if (0 < max)
+    reply->addstrf(reply, " maxlength=\"%d\"", max); 
+  if (required)
+    reply->addstr(reply, " required");
+  reply->addstr(reply, "></label></p>\n"); 
+}
+
+static void HTMLselect(qgrow_t *reply, char *title, char *name)
+{
+  if (NULL == title)
+    reply->addstrf(reply, "            <p><select name=\"%s\">", name);
+  else
+    reply->addstrf(reply, "      <p><label>%s : \n      <select name=\"%s\">\n", title, name);
+}
+static void HTMLselectEnd(qgrow_t *reply)
+{
+  reply->addstr(reply, "      </select></label></p>\n      \n");
+}
+static void HTMLselectEndNo(qgrow_t *reply)
+{
+  reply->addstr(reply, "      </select></p>");
+}
+
+static void HTMLoption(qgrow_t *reply, char *title, boolean selected)
+{
+  char *sel = "";
+
+  if (selected)
+    sel = " selected";
+  reply->addstrf(reply, "        <option value=\"%s\"%s>%s</option>\n", title, sel, title);
+}
+
+static void HTMLbutton(qgrow_t *reply, char *name, char *title)
+{
+  reply->addstrf(reply, "      <button type=\"submit\" name=\"doit\" value=\"%s\">%s</button>\n", name, title);
+}
+
+static void HTMLlist(qgrow_t *reply, char *title, qlist_t *list)
+{
+  qlist_obj_t obj;
+
+  reply->addstrf(reply, "<ul>%s\n", title);
+  memset((void*)&obj, 0, sizeof(obj)); // must be cleared before call
+  list->lock(list);
+  while (list->getnext(list, &obj, false) == true)
+  {
+    reply->addstr(reply, "<li>");
+    HTMLescapeString(reply, (char *) obj.data);
+    reply->addstr(reply, "</li>\n");
+  }
+  list->unlock(list);
+  reply->addstr(reply, "</ul>\n");
+}
+
+static int count = 0;
+void HTMLfill(reqData *Rd, enum fragmentType type, char *text, int length)
+{
+  char *tmp;
+
+  switch (type)
+  {
+    case FT_TEXT:
+    {
+      if (length)
+        Rd->reply->add(Rd->reply, (void *) text, length * sizeof(char));
+      break;
+    }
+
+    case FT_PARAM:
+    {
+      if (strcmp("DEBUG", text) == 0)
+      {
+        if (DEBUG)
+        {
+          Rd->reply->addstrf(Rd->reply, "<h1>FastCGI SledjChisl</h1>\n"
+                                        "<p>Request number %d,  Process ID: %d</p>\n", count++, getpid());
+          Rd->reply->addstrf(Rd->reply, "<p>libfcgi version: %s</p>\n", FCGI_VERSION);
+          Rd->reply->addstrf(Rd->reply, "<p>Lua version: %s</p>\n", LUA_RELEASE);
+          Rd->reply->addstrf(Rd->reply, "<p>LuaJIT version: %s</p>\n", LUAJIT_VERSION);
+          Rd->reply->addstrf(Rd->reply, "<p>MySQL client version: %s</p>\n", mysql_get_client_info());
+          outize(Rd->reply, Rd->headers, "Environment");
+          outize(Rd->reply, Rd->cookies, "Cookies");
+          outize(Rd->reply, Rd->queries, "Query");
+          outize(Rd->reply, Rd->body, "POST body");
+          outize(Rd->reply, Rd->stuff, "Stuff");
+          showSesh(Rd->reply, &Rd->shs);
+          if (Rd->lnk)  showSesh(Rd->reply, Rd->lnk);
+          outize(Rd->reply, Rd->database, "Database");
+          outizeCookie(Rd->reply, Rd->Rcookies, "Reply Cookies");
+          outize(Rd->reply, Rd->Rheaders, "Reply HEADERS");
+        }
+      }
+      else if (strcmp("URL", text) == 0)
+        Rd->reply->addstrf(Rd->reply, "%s://%s%s", Rd->Scheme, Rd->Host, Rd->Script);
+      else
+      {
+        if ((tmp = Rd->stats->stats->getstr(Rd->stats->stats, text, false)) != NULL)
+          Rd->reply->addstr(Rd->reply, tmp);
+        else
+          Rd->reply->addstrf(Rd->reply, "<b>%s</b>", text);
+      }
+      break;
+    }
+
+    case FT_LUA:
+      break;
+  }
+}
+
+static void HTMLfooter(qgrow_t *reply)
+{
+  reply->addstrf(reply, "    </div>\n");
+  reply->addstr(reply,
+    "    <div class='top-right'>\n"
+    "      <h1>Experimental account manager</h1>\n"
+    "      <p>This account manager system is currently experimental, and under heavy development. &nbsp; "
+    "         Which means it's not all written yet, and things may break.</p>\n"
+    "      <p>To create an account, choose a name and password, type them in, click the 'create account' button.</p>"
+    "      <p>On the next page, fill in all your details, then click on the 'confirm' button.</p>"
+    "      <p>We follow the usual web site registration process, which sends a validation email, with a link to click. &nbsp; "
+    "        When you get that email, click on the link, or copy it into a web browser.</p>"
+    "      <p>You will then be logged off. &nbsp; Now you have to wait for an admin to approve your new account. &nbsp; "
+    "        They should check with the person you listed as vouching for you first. &nbsp; They will tell you after they approve your account.</p>"
+    "      <p>Missing bits that are still being written - editing accounts, listing accounts, deleting accounts.</p>\n"
+    "    </div>\n");
+//  reply->addstr(reply, "    <div class='centre'>\n    </div>\n");
+  reply->addstr(reply,
+//    "    <div class='bottom-left'>\n"
+//    "    </div>\n"
+    "    <div class='bottom-right'>\n"
+    "      <iframe src='stats.html' style='border:none;height:100%;width:100%;'></iframe>\n"
+    "    </div>\n"
+    "  </font>\n"
+    "</body>\n</html>\n");
+}
+
+
+fragment *newFragment(enum fragmentType type, char *text, int len)
+{
+  fragment *frg = xmalloc(sizeof(fragment));
+
+  frg->type = type;
+  frg->length = len;
+  frg->text = xmalloc(len + 1);
+  memcpy(frg->text, text, len);
+  frg->text[len] = '\0';
+  return frg;
+}
+
+qlist_t *fragize(char *mm, size_t length)
+{
+  qlist_t *fragments = qlist(QLIST_THREADSAFE);
+  fragment *frg0, *frg1;
+
+  char *h;
+  int i, j = 0, k = 0, l, m;
+
+  // Scan for server side includes style markings.
+  for (i = 0; i < length; i++)
+  {
+    if (i + 5 < length)
+    {
+      if (('<' == mm[i]) && ('!' == mm[i + 1]) && ('-' == mm[i + 2]) && ('-' == mm[i + 3]) && ('#' == mm[i + 4]))               // '<!--#'
+      {
+        m = i;
+        i += 5;
+        if (i < length)
+        {
+          if (('e' == mm[i]) && ('c' == mm[i + 1]) && ('h' == mm[i + 2]) && ('o' == mm[i + 3]) && (' ' == mm[i + 4]))           // 'echo '
+          {
+            i += 5;
+            if (i + 5 < length)
+            {
+              if (('v' == mm[i]) && ('a' == mm[i + 1]) && ('r' == mm[i + 2]) && ('=' == mm[i + 3]) && ('"' == mm[i + 4]))       // 'var="'
+              {
+                i += 5;
+                for (j = i; j < length; j++)
+                {
+                  if ('"' == mm[j])                                                                                             // '"'
+                  {
+                    frg1 = newFragment(FT_PARAM, &mm[i], j - i);
+                    i = j + 1;
+                    if (i + 4 < length)
+                    {
+                      if ((' ' == mm[i]) && ('-' == mm[i + 1]) && ('-' == mm[i + 2]) && ('>' == mm[i + 3]))                     // ' -->'
+                        i += 4;
+                    }
+                    frg0 = newFragment(FT_TEXT, &mm[k], m - k);
+                    fragments->addlast(fragments, frg0, sizeof(fragment));
+                    fragments->addlast(fragments, frg1, sizeof(fragment));
+                    free(frg0);
+                    free(frg1);
+                    k = i;
+                    break;
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    }
+  }
+  frg0 = newFragment(FT_TEXT, &mm[k], length - k);
+  fragments->addlast(fragments, frg0, sizeof(*frg0));
+  free(frg0);
+
+  return fragments;
+}
+
+void unfragize(qlist_t *fragments, reqData *Rd, boolean fre)
+{
+  qlist_obj_t   lobj;
+  memset((void *) &lobj, 0, sizeof(lobj));
+  fragments->lock(fragments);
+  while (fragments->getnext(fragments, &lobj, false) == true)
+  {
+    fragment *frg = (fragment *) lobj.data;
+    if (NULL == frg->text)
+    {
+      E("NULL fragment!");
+      continue;
+    }
+    if (NULL != Rd)
+      HTMLfill(Rd, frg->type, frg->text, frg->length);
+    if (fre)
+      free(frg->text);
+  }
+  fragments->unlock(fragments);
+  if (fre)
+    fragments->free(fragments);
+}
+
+HTMLfile *checkHTMLcache(char *file)
+{
+  if (NULL == HTMLfileCache)
+    HTMLfileCache = qhashtbl(0, 0);
+
+  HTMLfile *ret = (HTMLfile *) HTMLfileCache->get(HTMLfileCache, file, NULL, true);
+  int fd = open(file, O_RDONLY);
+  size_t length = 0;
+
+  if (-1 == fd)
+  {
+    HTMLfileCache->remove(HTMLfileCache, file);
+    free(ret);
+    ret = NULL;
+  }
+  else
+  {
+    struct stat sb;
+    if (fstat(fd, &sb) == -1)
+    {
+      HTMLfileCache->remove(HTMLfileCache, file);
+      free(ret);
+      ret = NULL;
+      E("Failed to stat %s", file);
+    }
+    else
+    {
+      if ((NULL != ret) && (ret->last.tv_sec < sb.st_mtim.tv_sec))
+      {
+        HTMLfileCache->remove(HTMLfileCache, file);
+        free(ret);
+        ret = NULL;
+      }
+
+      if (NULL == ret)
+      {
+        char *mm = MAP_FAILED;
+
+        ret = xmalloc(sizeof(HTMLfile));
+        length = sb.st_size;
+        ret->last.tv_sec = sb.st_mtim.tv_sec;
+        ret->last.tv_nsec = sb.st_mtim.tv_nsec;
+
+        D("Loading web template %s, which is %d bytes long.", file, length);
+        mm = mmap(NULL, length, PROT_READ, MAP_SHARED | MAP_POPULATE, fd, 0);
+        if (mm == MAP_FAILED)
+        {
+          HTMLfileCache->remove(HTMLfileCache, file);
+          free(ret);
+          ret = NULL;
+          E("Failed to mmap %s", file);
+        }
+        else
+        {
+          ret->fragments = fragize(mm, length);
+          if (-1 == munmap(mm, length))
+            FCGI_fprintf(FCGI_stderr, "Failed to munmap %s\n", file);
+
+          HTMLfileCache->put(HTMLfileCache, file, ret, sizeof(*ret));
+        }
+      }
+      close(fd);
+    }
+  }
+
+  return ret;
+}
+
+
+
+
+
+/* TODO -
+
+    On new user / password reset.
+.       Both should have all the same security concerns as the login page, they are basically logins.
+.       Codes should be "very long", "(for example, 16 case-sensitive alphanumeric characters)"
+.    "confirm" button hit on "accountCreationPage" or "resetPasswordPage"
+.       generate a new token, keep it around for idleTimeOut (or at least 24 hours), call it .linky instead of .lua
+.           hash the linky for the file name, for the same reason we hash the hashish with pepper for the leaf-node.
+.           Include user level field, new users get -200.
+.           Store the linky itself around somewhere we can find it quickly for logged in users.
+.               store it in the regenerated session
+.               Scratch that, we should never store the raw linky, see above about hashing the linky.
+
+.           The linky is just like the session token, create it in exactly the same way.
+.               Linky is base64() of the binary, so it's short enough to be a file name, and not too long for the URL.
+.               But we only get to send one of them as a linky URL, no backup cookies / body / headers.
+.           Sooo, need to separate the session stuff out of Rd->stuff.
+.               Use two separate qhashtbl's, Rd->session and Rd->linky.
+
+        For new user
+.           create their /opt/opensim_SC/var/lib/users/UUID.lua account record, and symlink firstName_lastName.lua to it.
+.           They can log on, 
+            but all they can do is edit their email to send a new validation code, and enter the validation code.
+            They can reset their password.
+.           Warn them on login and any page refresh that there is an outstanding validation awaiting them.
+        For reset password
+.           Let them do things as normal, in case this was just someone being mean to them, coz their email addy might be public.
+.           Including the usual logging out and in again with their old password.
+.           Warn them on login and any page refresh that there is an outstanding password reset awaiting them.
+.       email linky, which is some or all of the token result bits strung together, BASE64 encode the result.
+.       regenerate the usual token
+.    user clicks on the linky (or just enters the linky in a field)
+.       validate the linky token.
+            compare the level field to the linky type in the linky URL, new users -200 would be "../validateUser/.." and not "../resetPassword/.."
+.       delete the linky token
+.           Particularly important for the forgotten password email, since now that token is in the wild, and is used to reset a password.
+                Which begs the question, other than being able to recieve the email, how do we tell it's them?
+                    Security questions suck, too easily guessed.
+                    Ask their DoB.  Still sucky, coz "hey it's my birthday today" is way too leaky.
+                    This is what Multi Factor Autentication is good for, and that's on the TODO list.
+                    Also, admins should have a harder time doing password resets.
+                        Must be approved by another admin?
+                        Must log onto the server via other means to twiddle something there?
+        For password reset page
+            Ask their DoB to help confirm it's them.
+                validate the DoB, delete tokens and back to the login page if they get it wrong
+                Should warn people on the accountCreationPage that DoB might be used this way.
+            ask them for the new password, twice
+            Create a new passwordSalt and passwordHash, store them in the auth table.
+.       For validate new user page
+.           tell them they have validated
+.           create their OpenSim account UserAccounts.UserTitle and auth tables, not GridUser table
+.           create their GridUser record.
+.           update their UserAccounts.Userlevel and UserAccounts.UserTitle
+.           send them to the login page.
+.       regenerate the usual token
+?       let user stay logged on?
+            Check best practices for this.
+
+    Check password strength.
+        https://stackoverflow.com/questions/549/the-definitive-guide-to-form-based-website-authentication?rq=1
+            Has some pointers to resources in the top answers "PART V: Checking Password Strength" section.
+
+    "PART VI: Much More - Or: Preventing Rapid-Fire Login Attempts"  and  "PART VII: Distributed Brute Force Attacks" is also good for -
+    Login attempt throttling.
+    Deal with dictionary attacks by slowing down access on password failures etc.
+
+    Deal with editing yourself.
+    Deal with editing others, but only as god.
+
+
+    Regularly delete old session files and ancient newbies.
+
+
+    Salts should be "lengthy" (128 bytes suggested in 2007) and random.  Should be per user to.  Or use a per user and a global one, and store the global one very securely.
+        And store hash(salt+password).
+        On the other hand, the OpenSim / SL password hashing function may be set in concrete in all the viewers.  I'll have to find out.
+            So far I have discovered -
+                On login server side if the password doesn't start with $1$, then password = "$1$" + Util.Md5Hash(passwd);
+                remove the "$1$ bit
+                string hashed = Util.Md5Hash(password + ":" + data.Data["passwordSalt"].ToString());
+                if (data.Data["passwordHash"].ToString() == hashed)
+                    passwordHash is char(32), and as implied above, doesn't include the $1$ bit.  passwordSalt is also char(32)
+                Cool VL and Impy at least sends the $1$ md5 hashed version over the wire.
+                    Modern viewers obfuscate the details buried deep in C++ OOP crap.
+                Sent via XMLRPC
+                MD5 is considered broken since 2013, possibly longer.
+        Otherwise use a slow hashing function.  bcrypt?  scrypt?  Argon2?  PBKDF2?
+            https://security.stackexchange.com/questions/211/how-to-securely-hash-passwords
+    Should include a code in the result that tells us which algorithm was used, so we can change the algorithm at a later date.  /etc/passwd does this.
+        Which is what the $1$ bit currently used between server and client is sorta for.
+
++    Would be good to have one more level of this Rd->database stuff, so we know the type of the thing.
+        While qhashtbl has API for putting strings, ints, and memory, it has none for finding out what type a stored thing is.
+        Once I have a structure, I add things like "level needed to edit it", "OpenSim db structure to Lua file mapping", and other fanciness.
+        Would also help with the timestamp being stored for the session, it prints out binary gunk in the DEBUG <div>.
+        Starting to get into object oriented territory here.  B-)
+            I'll have to do it eventually anyway.
+            object->tostring(object), and replace the big switch() statements in the existing db code with small functions.
+                That's why the qLibc stuff has that format, coz C doesn't understand the concept of passing "this" as the first argument.
+            https://stackoverflow.com/questions/351733/how-would-one-write-object-oriented-code-in-c
+            https://stackoverflow.com/questions/415452/object-orientation-in-c
+            http://ooc-coding.sourceforge.net/
+
+
+https://owasp.org/www-project-cheat-sheets/cheatsheets/Input_Validation_Cheat_Sheet.html#Email_Address_Validation
+https://cheatsheetseries.owasp.org/
+https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html
+https://owasp.org/www-project-cheat-sheets/cheatsheets/Authentication_Cheat_Sheet.html
+https://softwareengineering.stackexchange.com/questions/46716/what-technical-details-should-a-programmer-of-a-web-application-consider-before
+https://wiki.owasp.org/index.php/OWASP_Guide_Project
+https://stackoverflow.com/questions/549/the-definitive-guide-to-form-based-website-authentication?rq=1
+https://owasp.org/www-community/xss-filter-evasion-cheatsheet
+    A list of example XSS things to try.
+*/
+
+
+
+/* Four choices for the token -  (https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html)
+    https://en.wikipedia.org/wiki/Cross-site_request_forgery
+        Has some more info.
+
+Large random value generated by a secure method (getrandom(2)).
+    Keep it secret, put it in hidden fields, or custom HTTP header (requires JavaScript but more secure than hidden fields).
+    NOT cookies or GET.  Don't log it.
+Cryptographically sign a session ID and timestamp.
+    Timestamp is for session timeouts.
+    Keep it secret, put it in hidden fields, or custom HTTP header (requires JavaScript but more secure than hidden fields).
+    Needs a secret key server side.
+A strong HMAC (SHA-256 or better) of a session ID and timestamp.
+    The above document seems to imply that a key is used for this, the openssl EVP functions don't mention any way of supplying this key.
+        https://en.wikipedia.org/wiki/HMAC says there is a key as well.
+        https://www.openssl.org/docs/man1.1.0/man3/HMAC.html  HAH!  They can have keys.  OpenSSL's docs suck.
+    Token = HMAC(sessionID+timestamp)+timestamp (Yes, timestamp is used twice).
+    Keep it secret, put it in hidden fields, or custom HTTP header (requires JavaScript but more secure than hidden fields).
+    Needs a secret key server side.
+Double cookie
+    Large random value generated by a secure method set as a cookie and hidden field.  Check they match.
+    Optional - encrypt / salted hash it in another cookie / hidden field.
++       Also a resin (BASE64 session key in the query string).
+            Not such a good idea to have something in the query, coz that screws with bookmarks.
+        https://security.stackexchange.com/questions/59470/double-submit-cookies-vulnerabilities
+            Though so far all the pages I find saying this don't say flat out say "use headers instead", though they do say "use HSTS".
+        https://security.stackexchange.com/questions/220797/is-the-double-submit-cookie-pattern-still-effective
++           Includes a work around that I might already be doing.
+TODO - think it through, is it really secure against session hijacking?
+TODO - document why we redirect POST to GET, coz it's a pain in the arse, and we have to do things twice.
+
+SOOOOO - use double cookie + hidden field.
+    No headers, coz I need JavaScript to do that.
+    No hidden field when redirecting post POST to GET, coz GET doesn't get those.
+    pepper              = long pass phrase or some such stored in .sledjChisl.conf.lua, which has to be protected dvs1/opensimsc/0640 as well as the database credentials.
+    salt                = large random value generated by a secure method (getrandom(2)).
+    seshID              = large random value generated by a secure method (getrandom(2)).
+    timeStamp           = mtime of the leaf-node file, set to current time when we are creating the token.
+    sesh                = seshID + timeStamp
+    munchie             = HMAC(sesh) + timeStamp        The token       hidden field
+    toke_n_munchie      = HMAC(UUID + munchie)          The token       cookie
+    hashish             = HMACkey(toke_n_munchie, salt) Salted token    cookie & linky query
+?    resin              = BASE64(hashish)               Base64 token    cookie
+    leaf-node           = HMACkey(hashish, pepper)      Stored token    file name
+
+    Leaf-node.lua (mtime is timeStamp)
+        IP, UUID, salt, seshID, user name, passwordSalt, passwordHash (last two for OpenSim password protocol)
+
+    The test -  (validateSesh() below)
+        we get hashish and toke_n_munchie
+        HMACkey(hashish + pepper)       -> leaf-node
+        read leaf-node.lua              -> IP, UUID, salt, seshID
+        get it's mtime                  -> timeStamp
+        seshID + timeStamp              -> sesh
+        HMAC(sesh) + timeStamp          -> munchie
+            if we got munchie in the hidden field, compare it
+        toke_n_munchie == HMAC(UUID + munchie)
+            For linky it'll be -
+            HMAC(UUID + munchie)        -> toke_n_munchie
+        hashish == HMACkey(toke_n_munchie + salt)
++       If it's too old according to mtime, delete it and logout.
+
+I should make it easy to change the HMAC() function.  Less important for these short lived sessions, more important for the linky URLs, most important for stored password hashes.
+    Same for the pepper.
+
+The required JavaScript might be like https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html#xmlhttprequest--native-javascript-
+    NOTE - they somehow fucked up that anchor tag.
+
+NOTE - storing a pepper on the same RAID array as everything else will be a problem when it comes time to replace one of the disks.
+        It might have failed badly enough that you can't wipe it, but an attacker can dumpster dive it, replace the broken bit (firmware board), and might get lucky.
+        Also is a problem with SSD and rust storing good data on bad sectors in the spare sector pool, wear levelling, etc.
+
+https://stackoverflow.com/questions/16891729/best-practices-salting-peppering-passwords
+*/
+
+
+qlisttbl_t *accountLevels = NULL;
+
+
+static void bitch(reqData *Rd, char *message, char *log)
+{
+  addStrL(Rd->errors, message);
+  E("%s %s  %s - %s  %s", getStrH(Rd->headers, "REMOTE_ADDR"), Rd->shs.UUID, Rd->shs.name, message, log);
+}
+
+/* "A token cookie that references a non-existent session, its value should be replaced immediately to prevent session fixation."
+https://owasp.org/www-community/attacks/Session_fixation
+    Which describes the problem, but offers no solution.
+    See https://stackoverflow.com/questions/549/the-definitive-guide-to-form-based-website-authentication?rq=1.
+I think this means send a new cookie.
+    I clear out the cookies and send blank ones with -1 maxAge, so they should get deleted.
+*/
+static void bitchSession(reqData *Rd, char *message, char *log)
+{
+  if ('\0' != message[0])
+    addStrL(Rd->errors, message);
+  C("%s %s  %s - %s  %s", getStrH(Rd->headers, "REMOTE_ADDR"), Rd->shs.UUID, Rd->shs.name, message, log);
+  Rd->shs.status = SHS_BOGUS;
+}
+
+
+// The ancient, insecure since 2011, Second Life / OpenSim password hashing algorithm.
+char *newSLOSsalt(reqData *Rd)
+{
+  char *salt = NULL;
+  unsigned char *md5hash = xzalloc(17);
+  char uuid[37];
+  uuid_t binuuid;
+
+  uuid_generate_random(binuuid);
+  uuid_unparse_lower(binuuid, uuid);
+  if (!qhashmd5((void *) uuid, strlen(uuid), md5hash))
+    bitch(Rd, "Internal error.", "newSLOSsalt() - qhashmd5(new uuid) failed.");
+  else
+    salt = qhex_encode(md5hash, 16);
+  free(md5hash);
+  return salt;
+}
+
+char *checkSLOSpassword(reqData *Rd, char *salt, char *password, char *passwordHash, char *fail)
+{
+  char *ret = NULL;
+  int rt = 0;
+  unsigned char *md5hash = xzalloc(17);
+  char *hash = NULL, *passHash = NULL;
+
+T("checkSLOSpassword(%s,  %s,  %s,  ", password, salt, passwordHash, fail);
+  // Calculate passHash.
+  if (!qhashmd5((void *) password, strlen(password), md5hash))
+  {
+    bitch(Rd, "Internal error.", "checkSLOSpassword() - qhashmd5(password) failed.");
+    rt++;
+  }
+  else
+  {
+    passHash = qhex_encode(md5hash, 16);
+    hash = xmprintf("%s:%s", passHash, salt);
+    if (!qhashmd5((void *) hash, strlen(hash), md5hash))
+    {
+      bitch(Rd, "Internal error.", "checkSLOSpassword() - qhashmd5(password:salt) failed.");
+      rt++;
+    }
+    else
+    {
+      ret = qhex_encode(md5hash, 16);
+    }
+    free(hash);
+    free(passHash);
+  }
+
+  // If one was passed in, compare it.
+  if ((NULL != ret) && (NULL != passwordHash) && (strcmp(ret, passwordHash) != 0))
+  {
+    bitch(Rd, fail, "Password doesn't match passwordHash");
+    E("  %s   %s - %s != %s", password, salt, ret, passwordHash);
+    rt++;
+    free(ret);
+    ret = NULL;
+  }
+  free(md5hash);
+
+  return ret;
+}
+
+
+int LuaToHash(reqData *Rd, char *file, char *var, qhashtbl_t *tnm, int ret, struct stat *st, struct timespec *now, char *type)
+{
+  struct timespec then;
+
+  if (-1 == clock_gettime(CLOCK_REALTIME, &then))
+    perror_msg("Unable to get the time.");
+  I("Reading %s file %s", type, file);
+  if (0 != stat(file, st))
+  {
+    D("No %s file.", file);
+    perror_msg("Unable to stat %s", file);
+    ret++;
+  }
+  else
+  {
+    int status = luaL_loadfile(Rd->L, file), result;
+
+    if (status)
+    {
+      bitch(Rd, "No such thing.", "Can't load file.");
+      E("Couldn't load file: %s", lua_tostring(Rd->L, -1));
+      ret++;
+    }
+    else
+    {
+      result = lua_pcall(Rd->L, 0, LUA_MULTRET, 0);
+
+      if (result)
+      {
+        bitch(Rd, "Broken thing.", "Can't run file.");
+        E("Failed to run script: %s", lua_tostring(Rd->L, -1));
+        ret++;
+      }
+      else
+      {
+        lua_getglobal(Rd->L, var);
+        lua_pushnil(Rd->L);
+
+        while(lua_next(Rd->L, -2) != 0)
+        {
+          char *n = (char *) lua_tostring(Rd->L, -2);
+
+          if (lua_isstring(Rd->L, -1))
+          {
+            tnm->putstr(tnm, n, (char *) lua_tostring(Rd->L, -1));
+d("Lua reading (%s) %s = %s", type, n, getStrH(tnm, n));
+          }
+          else
+          {
+            char *v = (char *) lua_tostring(Rd->L, -1);
+            W("Unknown Lua variable type for %s = %s", n, v);
+          }
+          lua_pop(Rd->L, 1);
+        }
+
+        if (-1 == clock_gettime(CLOCK_REALTIME, now))
+          perror_msg("Unable to get the time.");
+        double n = (now->tv_sec * 1000000000.0) + now->tv_nsec;
+        double t = (then.tv_sec * 1000000000.0) + then.tv_nsec;
+        T("Reading %s file took %lf seconds", type, (n - t) / 1000000000.0);
+      }
+    }
+  }
+
+  return ret;
+}
+
+
+char *checkLinky(reqData *Rd)
+{
+// TODO - should be from Rd.shs->linky-hashish
+  char *ret = xstrdup(""), *t0 = getStrH(Rd->stuff, "linky-hashish");
+
+  if ('\0' != t0[0])
+  {
+    char *t1 = qurl_encode(t0, strlen(t0));
+    free(ret);
+    ret = xmprintf("<p><font color='red'><b>You have an email waiting with a validation link in it, please check your email. &nbsp; "
+                    "It will be from %s@%s, and it might be in your spam folder, coz these sorts of emails sometimes end up there. &nbsp; "
+                    "You should add that email address to your contacts, or otherwise let it through your spam filter. &nbsp; "
+//                  "<a href='https://%s%s?hashish=%s'>%s</a>"
+                    "</b></font></p>\n",
+                    "grid_no_reply", Rd->Host,
+                    Rd->Host, Rd->RUri
+//                  ,t1, t0
+                    );
+    free(t1);
+  }
+  return ret;
+}
+
+
+static void freeSesh(reqData *Rd, boolean linky, boolean wipe)
+{
+  char *file = NULL;
+  sesh *shs = &Rd->shs;
+
+T("free sesh %s %s", linky ? "linky" : "session", wipe ? "wipe" : "delete");
+  if (linky)
+  {
+    shs = Rd->lnk;
+    file = xmprintf("%s/sessions/%s.linky", scCache, shs->leaf);
+  }
+  else
+    file = xmprintf("%s/sessions/%s.lua", scCache, shs->leaf);
+
+  if (wipe)
+    I("Wiping session %s.", file);
+  else
+    I("Deleting session %s.", file);
+
+  if ('\0' != shs->leaf[0])
+  {
+    if (unlink(file))
+      perror_msg("Unable to delete %s", file);
+  }
+
+  Rd->body->   remove(Rd->body,    "munchie");
+
+  freeCookie(Rd, "toke_n_munchie");
+  freeCookie(Rd, "hashish");
+  cookie *ck = setCookie(Rd, "toke_n_munchie", "");
+  cookie *ckh = setCookie(Rd, "hashish", "");
+  ck->maxAge = -1;      // Should expire immediately.
+  ckh->maxAge = -1;     // Should expire immediately.
+
+  qhashtbl_obj_t obj;
+
+  if (wipe)
+  {
+    memset((void*)&obj, 0, sizeof(obj));
+    Rd->database->lock(Rd->database);
+    while(Rd->database->getnext(Rd->database, &obj, false) == true)
+      Rd->database->remove(Rd->database, obj.name);
+    Rd->database->unlock(Rd->database);
+    if (NULL != shs->name)      free(shs->name);
+    shs->name = NULL;
+    if (NULL != shs->UUID)      free(shs->UUID);
+    shs->UUID = NULL;
+    shs->level = -256;
+// TODO - should I wipe the rest of Rd->shs as well?
+    Rd->stuff->remove(Rd->stuff, "name");
+    Rd->stuff->remove(Rd->stuff, "firstName");
+    Rd->stuff->remove(Rd->stuff, "lastName");
+    Rd->stuff->remove(Rd->stuff, "email");
+    Rd->stuff->remove(Rd->stuff, "passwordSalt");
+    Rd->stuff->remove(Rd->stuff, "passwordHash");
+    Rd->stuff->remove(Rd->stuff, "passHash");
+    Rd->stuff->remove(Rd->stuff, "passSalt");
+    Rd->stuff->remove(Rd->stuff, "linky-hashish");
+  }
+
+  if (shs->isLinky)
+  {
+    free(Rd->lnk);
+    Rd->lnk = NULL;
+  }
+  else
+  {
+    shs->leaf[0] = '\0';
+  }
+  free(file);
+}
+
+static void setToken_n_munchie(reqData *Rd, boolean linky)
+{
+  sesh *shs = &Rd->shs;
+  char *file;
+
+  if (linky)
+  {
+    shs = Rd->lnk;
+    file = xmprintf("%s/sessions/%s.linky", scCache, shs->leaf);
+  }
+  else
+  {
+    file = xmprintf("%s/sessions/%s.lua", scCache, shs->leaf);
+  }
+
+  struct stat st;
+  int s = stat(file, &st);
+
+  if (!linky)
+  {
+    setCookie(Rd, "toke_n_munchie", shs->toke_n_munchie);
+    setCookie(Rd, "hashish", shs->hashish);
+  }
+  char *tnm0 = xmprintf( "toke_n_munchie = \n"
+                        "{\n"
+                        "  ['IP']='%s',\n"
+                        "  ['salt']='%s',\n"
+                        "  ['seshID']='%s',\n",
+                        getStrH(Rd->headers, "REMOTE_ADDR"),
+                        shs->salt,
+                        shs->seshID
+                      );
+  char *tnm1 = xmprintf("  ['name']='%s',\n  ['level']='%d',\n", shs->name, (int) shs->level);
+  char *tnm2 = xmprintf("  ['UUID']='%s',\n", shs->UUID);
+  char *tnm3 = xmprintf("  ['passHash']='%s',\n", getStrH(Rd->stuff, "passHash"));
+  char *tnm4 = xmprintf("  ['passSalt']='%s',\n", getStrH(Rd->stuff, "passSalt"));
+  char *tnm9 = xmprintf("}\n"
+                        "return toke_n_munchie\n");
+  int fd = notstdio(xcreate_stdio(file, O_CREAT | O_WRONLY | O_TRUNC | O_CLOEXEC, S_IRUSR | S_IWUSR));
+  size_t l = strlen(tnm0);
+
+  if (s)
+    I("Creating session %s.", file);
+  else
+    C("Updating session %s.", file);    // I don't think updates can occur now.
+t("Write shs %s", tnm0);
+  if (l != writeall(fd, tnm0, l))
+  {
+    perror_msg("Writing %s", file);
+    freeSesh(Rd, linky, TRUE);
+  }
+
+  if (NULL != shs->name)
+  {
+t("Write shs %s", tnm1);
+    l = strlen(tnm1);
+    if (l != writeall(fd, tnm1, l))
+    {
+      perror_msg("Writing %s", file);
+      freeSesh(Rd, linky, TRUE);
+    }
+  }
+  if (NULL != shs->UUID)
+  {
+t("Write shs %s", tnm2);
+    l = strlen(tnm2);
+    if (l != writeall(fd, tnm2, l))
+    {
+      perror_msg("Writing %s", file);
+      freeSesh(Rd, linky, TRUE);
+    }
+  }
+
+  if ('\0' != getStrH(Rd->stuff, "passHash")[0])
+  {
+t("Write shs %s", tnm3);
+    l = strlen(tnm3);
+    if (l != writeall(fd, tnm3, l))
+    {
+      perror_msg("Writing %s", file);
+      freeSesh(Rd, linky, TRUE);
+    }
+  }
+
+  if ('\0' != getStrH(Rd->stuff, "passSalt")[0])
+  {
+t("Write shs %s", tnm4);
+    l = strlen(tnm4);
+    if (l != writeall(fd, tnm4, l))
+    {
+      perror_msg("Writing %s", file);
+      freeSesh(Rd, linky, TRUE);
+    }
+  }
+
+  l = strlen(tnm9);
+  if (l != writeall(fd, tnm9, l))
+  {
+    perror_msg("Writing %s", file);
+    freeSesh(Rd, linky, TRUE);
+  }
+  // Set the mtime on the file.
+  futimens(fd, shs->timeStamp);
+  xclose(fd);
+  free(tnm9);
+  free(tnm4);
+  free(tnm3);
+  free(tnm2);
+  free(tnm1);
+  free(tnm0);
+  free(file);
+
+  if (linky)
+  {
+// TODO - Later use libcurl.
+      char *first = getStrH(Rd->stuff, "firstName"), *last = getStrH(Rd->stuff, "lastName");
+// TODO - should be from Rd.shs->linky-hashish
+      char *t0 = xstrdup(Rd->lnk->hashish), *content, *command;
+
+      if ('\0' != t0[0])
+      {
+        size_t sz = qhex_decode(t0);
+        char *t1 = qB64_encode(t0, sz);
+
+        content = xmprintf(
+          "From: grid_no_reply@%s\n"
+          "Relpy-to: grid_no_reply@%s\n"
+          "Return-Path: bounce_email@%s\n"
+          "To: %s\n"
+          "Subject: Validate your new account on %s\n"
+          "\n"
+          "This is an automated validation email sent from %s.\n"
+          "\n"
+          "Dear %s %s,\n"
+          "\n"
+          "Some one has created the account '%s %s' on \n"
+          "https://%s%s, and hopefully it was you.\n"
+          "If it wasn't you, you can ignore this email.\n"
+          "\n"
+          "Please go to this web link to validate your new account -\n"
+          "https://%s%s?hashish=%s\n"
+          "\n"
+          "Do not reply to this email.\n"
+          "\n",
+          Rd->Host, Rd->Host, Rd->Host,
+          getStrH(Rd->stuff, "email"),
+          Rd->Host, Rd->Host,
+          first, last,
+          first, last, Rd->Host, Rd->RUri,
+          Rd->Host, Rd->RUri, t1
+        );
+        l = strlen(content);
+        file = xmprintf("%s/sessions/%s.email", scCache, shs->leaf);
+        fd = notstdio(xcreate_stdio(file, O_CREAT | O_WRONLY | O_TRUNC | O_CLOEXEC, S_IRUSR | S_IWUSR));
+
+        if (l != writeall(fd, content, l))
+        {
+          perror_msg("Writing %s", file);
+//        freeSesh(Rd, linky, TRUE);
+        }
+        xclose(fd);
+        I("Sending linky email to %s  %s", getStrH(Rd->stuff, "email"), t1);
+        command = xmprintf("sendmail -oi -t <'%s'", file);
+        int i = system(command);
+        if (!WIFEXITED(i))
+          E("sendmail command failed!");
+        free(command);
+        free(file);
+        free(content);
+        free(t1);
+        free(t0);
+      }
+  }
+}
+
+
+static void generateAccountUUID(reqData *Rd)
+{
+  // Generate a UUID, check it isn't already being used.
+  char uuid[37], *where;
+  uuid_t binuuid;
+  my_ulonglong users = 0;
+  int c;
+
+  do    // UserAccounts.PrincipalID is a unique primary index anyway, but we want the user creation process to be a little on the slow side.
+  {
+    struct stat st;
+
+    uuid_generate_random(binuuid);
+    uuid_unparse_lower(binuuid, uuid);
+    // Try Lua user file.
+    where = xmprintf("%s/users/%s.lua", scData, uuid);
+    c = stat(where, &st);
+    if (c)
+      users = 1;
+    free(where);
+    // Try database.
+    where = xmprintf("UserAccounts.PrincipalID = '%s'", uuid);
+    D("Trying new UUID %s.", where);
+    users = dbCount("UserAccounts", where);
+    free(where);
+  } while (users != 0);
+  if (NULL != Rd->shs.UUID)     free(Rd->shs.UUID);
+  Rd->shs.UUID = xstrdup(uuid);
+  Rd->shs.level = -200;
+  Rd->database->putstr(Rd->database, "UserAccounts.PrincipalID", uuid);
+  Rd->database->putstr(Rd->database, "UserAccounts.Userlevel",   "-200");
+}
+
+char *getLevel(short level)
+{
+  char *ret = "", *lvl = xmprintf("%d", level);
+  ret = accountLevels->getstr(accountLevels, lvl, false);
+  if (NULL == ret)
+  {
+    qlisttbl_obj_t obj;
+
+    memset((void*)&obj, 0, sizeof(obj)); // must be cleared before call
+    accountLevels->lock(accountLevels);
+    while(accountLevels->getnext(accountLevels, &obj, NULL, false) == true)
+    {
+      if (atoi(obj.name) <= level)
+        ret = (char *) obj.data;
+    }
+  }
+  free(lvl);
+  return ret;
+}
+
+typedef struct _systemFolders systemFolders;
+struct _systemFolders
+{
+  char *name;
+  short type;
+};
+
+systemFolders sysFolders[] =
+{
+  {"My Inventory",      8},
+  {"Animations",        20},
+  {"Body Parts",        13},
+  {"Calling Cards",     2},
+//    {"Friends",       2},
+//      {"All",         2},
+  {"Clothing",          5},
+  {"Current Outfit",    46},
+  {"Favorites",         23},
+  {"Gestures",          21},
+  {"Landmarks",         3},
+  {"Lost And Found",    16},
+  {"Mesh",              49},
+  {"My Outfits",        48},
+  {"My Suitcase",       100},   // All the others are replicated inside.
+  {"Notecards",         7},
+  {"Objects",           6},
+  {"Outfit",            47},
+  {"Photo Album",       15},
+  {"Scripts",           10},
+  {"Sounds",            1},
+  {"Textures",          0},
+  {"Trash",             14},
+  {NULL,                -1}
+};
+
+boolean writeLuaDouble(reqData *Rd, int fd, char *file, char *name, double number)
+{
+  boolean ret = TRUE;
+// TODO - putting these in Lua as numbers causes lua_tolstring to barf when we read them.  Though Lua is supposed to convert between numbers and strings.
+  char *t = xmprintf("  ['%s'] = '%f',\n", name, number);       // NOTE - default precision is 6 decimal places.
+  size_t l = strlen(t);
+
+  if (l != writeall(fd, t, l))
+  {
+    perror_msg("Writing %s", file);
+    ret = FALSE;
+  }
+  free(t);
+  return ret;
+}
+
+boolean writeLuaInteger(reqData *Rd, int fd, char *file, char *name, long number)
+{
+  boolean ret = TRUE;
+// TODO - putting these in Lua as numbers causes lua_tolstring to barf when we read them.  Though Lua is supposed to convert between numbers and strings.
+  char *t = xmprintf("  ['%s'] = '%ld',\n", name, number);
+  size_t l = strlen(t);
+
+  if (l != writeall(fd, t, l))
+  {
+    perror_msg("Writing %s", file);
+    ret = FALSE;
+  }
+  free(t);
+  return ret;
+}
+
+boolean writeLuaString(reqData *Rd, int fd, char *file, char *name, char *string)
+{
+  boolean ret = TRUE;
+
+  if (NULL == string)
+    string = getStrH(Rd->stuff, name);
+
+  size_t l = strlen(string);
+  char *t0 = xmalloc(l * 2 + 1);
+  int i, j = 0;
+
+// TODO - maybe escape other non printables as well?
+  for (i = 0; i < l; i++)
+  {
+    // We don't need to escape [] here, coz we are using '' below.  Same applies to ", but do it anyway.
+    switch(string[i])
+    {
+      case '\n':
+      case '\\':
+      case '\'':
+      case '"':
+        t0[j++] = '\\'; break;
+    }
+    if ('\n' == string[i])
+      t0[j++] = 'n';
+    else if ('\r' == string[i])
+      ;
+    else
+      t0[j++] = string[i];
+  }
+  t0[j] = '\0';
+
+  char *t1 = xmprintf("  ['%s'] = '%s',\n", name, t0);
+
+  l = strlen(t1);
+  if (l != writeall(fd, t1, l))
+  {
+    perror_msg("Writing %s to %s", name, file);
+    ret = FALSE;
+  }
+  free(t1);
+  free(t0);
+  return ret;
+}
+
+static void accountWrite(reqData *Rd)
+{
+  char *uuid = getStrH(Rd->database, "UserAccounts.PrincipalID"); 
+  char *file = xmprintf("%s/users/%s.lua", scData, uuid);
+  char *level = getStrH(Rd->database, "UserAccounts.UserLevel");
+  char *link = (NULL == Rd->lnk) ? "" : Rd->lnk->hashish;
+  char *tnm = "user = \n{\n";
+
+  struct stat st;
+  int s = stat(file, &st);
+  int fd = notstdio(xcreate_stdio(file, O_CREAT | O_WRONLY | O_TRUNC | O_CLOEXEC, S_IRUSR | S_IWUSR));
+  size_t l = strlen(tnm);
+  uuid_t binuuid;
+
+  uuid_clear(binuuid);
+  if ((NULL != uuid) && ('\0' != uuid[0]))
+    uuid_parse(uuid, binuuid);
+  if ((NULL != uuid) && ('\0' != uuid[0]) && (!uuid_is_null(binuuid)))
+  {
+    if (s)
+      I("Creating user %s.", file);
+    else
+      I("Updating user %s.", file);
+
+    if (l != writeall(fd, tnm, l))
+      perror_msg("Writing %s", file);
+    else
+    {
+      char *name = Rd->stuff->getstr(Rd->stuff, "name", true);
+      char *end = "}\nreturn user\n";
+
+      if (!writeLuaString (Rd, fd, file, "name",        name))                  goto notWritten;
+      if (!writeLuaInteger(Rd, fd, file, "created",
+                (strcmp("", getStrH(Rd->stuff, "created")) != 0) ? atol(getStrH(Rd->stuff, "created")) : (long) Rd->shs.timeStamp[1].tv_sec))   goto notWritten;
+      if (!writeLuaString (Rd, fd, file, "email",       NULL))                  goto notWritten;
+      if (!writeLuaString (Rd, fd, file, "title",       getLevel(atoi(level)))) goto notWritten;
+      if (!writeLuaString (Rd, fd, file, "level",       level))                 goto notWritten;
+      if (!writeLuaInteger(Rd, fd, file, "flags",       0))                     goto notWritten;
+      if (!writeLuaInteger(Rd, fd, file, "active",      1))                     goto notWritten;
+      if (!writeLuaString (Rd, fd, file, "passwordHash", NULL))                 goto notWritten;
+      if (!writeLuaString (Rd, fd, file, "passwordSalt", NULL))                 goto notWritten;
+      if (!writeLuaString (Rd, fd, file, "UUID",        uuid))                  goto notWritten;
+      if (!writeLuaString (Rd, fd, file, "DoB",         NULL))                  goto notWritten;
+      if (!writeLuaString (Rd, fd, file, "agree",       NULL))                  goto notWritten;
+      if (!writeLuaString (Rd, fd, file, "adult",       NULL))                  goto notWritten;
+      if (!writeLuaString (Rd, fd, file, "aboutMe",     NULL))                  goto notWritten;
+      if (!writeLuaString (Rd, fd, file, "vouched",     "off"))                 goto notWritten;
+      if (!writeLuaString (Rd, fd, file, "voucher",     NULL))                  goto notWritten;
+      if (!writeLuaString (Rd, fd, file, "link",        link))                  goto notWritten;
+      l = strlen(end);
+      if (l != writeall(fd, end, l))
+        perror_msg("Writing %s", file);
+      else
+      {
+        char *nm = xmprintf("%s/users/%s.lua", scData, qstrreplace("tr", name, " ", "_"));
+
+        free(file);
+        file = xmprintf("%s.lua", uuid);
+        I("Symlinking %s to %s", file, nm);
+        if (0 != symlink(file, nm))
+          perror_msg("Symlinking %s to %s", file, nm);
+        free(nm);
+      }
+notWritten:
+      free(name);
+    }
+    xclose(fd);
+
+    short lvl = atoi(level);
+
+    if (0 <= lvl)       // Note that http://opensimulator.org/wiki/Userlevel claims that 1 and above are "GOD_LIKE".
+    {
+      if (Rd->fromDb)
+      {
+        I("Updating database user %s.", getStrH(Rd->stuff, "name"));
+      }
+      else
+      {
+        // Setup the database stuff.
+        static dbRequest *acntsI = NULL;
+        if (NULL == acntsI)
+        {
+          static char *szi[] =
+          {
+            "FirstName",
+            "LastName",
+            "Email",
+            "Created",
+            "PrincipalID",
+            "ScopeID",
+            "UserLevel",
+            "UserFlags",
+            "UserTitle",
+//          "ServiceURLs",      // No worky "text", filled with crap.
+            "active",
+            NULL
+          };
+          static char *szo[] = {NULL};
+          acntsI = xzalloc(sizeof(dbRequest));
+          acntsI->table = "UserAccounts";
+          acntsI->inParams  = szi;
+          acntsI->outParams = szo;
+          acntsI->where = "";
+          acntsI->type = CT_CREATE;
+          dbRequests->addfirst(dbRequests, &acntsI, sizeof(dbRequest *));
+        }
+        static dbRequest *authI = NULL;
+        if (NULL == authI)
+        {
+          static char *szi[] = {"UUID", "passwordSalt", "passwordHash", "accountType", "webLoginKey", NULL};
+          static char *szo[] = {NULL};
+          authI = xzalloc(sizeof(dbRequest));
+          authI->table = "auth";
+          authI->inParams  = szi;
+          authI->outParams = szo;
+          authI->where = "";
+          authI->type = CT_CREATE;
+          dbRequests->addfirst(dbRequests, &authI, sizeof(dbRequest *));
+        }
+        static dbRequest *invFolderI = NULL;
+        if (NULL == invFolderI)
+        {
+          static char *szi[] = 
+          {
+            "agentID",
+            "folderName",
+            "type",             // smallint(6)
+            "version",          // int(11)
+            "folderID",
+            "parentFolderID",
+            NULL
+          };
+          static char *szo[] = {NULL};
+          invFolderI = xzalloc(sizeof(dbRequest));
+          invFolderI->table = "inventoryfolders";
+          invFolderI->inParams  = szi;
+          invFolderI->outParams = szo;
+          invFolderI->where = "";
+          invFolderI->type = CT_CREATE;
+          dbRequests->addfirst(dbRequests, &invFolderI, sizeof(dbRequest *));
+        }
+        static dbRequest *gUserI = NULL;
+        if (NULL == gUserI)
+        {
+//        static char *szi[] = {"UserID", "HomeRegionID", "HomePosition", "HomeLookAt", "LastRegionID", "LastPosition", "LastLookAt", "Online", "Login", "Logout", NULL};
+          static char *szi[] = {"UserID", NULL};        // All the defaults are what we would set anyway.
+          static char *szo[] = {NULL};
+          gUserI = xzalloc(sizeof(dbRequest));
+          gUserI->table = "GridUser";
+          gUserI->inParams  = szi;
+          gUserI->outParams = szo;
+          gUserI->where = "";
+          gUserI->type = CT_CREATE;
+          dbRequests->addfirst(dbRequests, &gUserI, sizeof(dbRequest *));
+        }
+
+        I("Creating database user %s   %s.", uuid, getStrH(Rd->stuff, "name"));
+        char *first = Rd->stuff->getstr(Rd->stuff, "name", true), *last = strchr(first, ' ');
+
+        // create user record.
+        *last++ = '\0';
+        if (0 != dbDoSomething(acntsI, FALSE, 
+          first,
+          last,
+          getStrH(Rd->stuff, "email"),
+          (strcmp("", getStrH(Rd->stuff, "created")) != 0) ? atoi(getStrH(Rd->stuff, "created")) : (int) Rd->shs.timeStamp[1].tv_sec,
+          uuid,
+          "00000000-0000-0000-0000-000000000000",
+          atoi(level),
+          0,
+          getLevel(atoi(level)),
+//        "",   // Defaults to NULL, empty string seems OK to.  Then gets filled in later.
+          1
+        ))
+          bitch(Rd, "Internal error.", "Failed to create UserAccounts record.");
+        else
+        {
+          char uuidI[37], uuidR[37], uuidC[37], uuidS[37];
+          uuid_t binuuidI;
+          int r = 0, i;
+
+          // Create inventory records.
+          strcpy(uuidR, "00000000-0000-0000-0000-000000000000");
+          for (i = 0; (NULL != sysFolders[i].name) && (0 == r); i++)
+          {
+            uuid_generate_random(binuuidI);
+            uuid_unparse_lower(binuuidI, uuidI);
+// TODO - should check there isn't a folder with this UUID already.
+            D("Creating %s inventory folder for user %s.", sysFolders[i].name, getStrH(Rd->stuff, "name"));
+            r += dbDoSomething(invFolderI, FALSE, uuid, sysFolders[i].name, sysFolders[i].type, 1, uuidI, uuidR);       // LEAKY
+            if (0 != r)
+              bitch(Rd, "Internal error.", "Failed to create invenoryFolder record.");
+            if (strcmp("My Inventory", sysFolders[i].name) == 0)
+              strcpy(uuidR, uuidI);
+            if (strcmp("Calling Cards", sysFolders[i].name) == 0)
+              strcpy(uuidC, uuidI);     
+            if (strcmp("My Suitcase", sysFolders[i].name) == 0)
+              strcpy(uuidS, uuidI);
+          }
+
+            uuid_generate_random(binuuidI);
+            uuid_unparse_lower(binuuidI, uuidI);
+// TODO - should check there isn't a folder with this UUID already.
+            D("Creating %s inventory folder for user %s.", "Friends", getStrH(Rd->stuff, "name"));
+            r += dbDoSomething(invFolderI, FALSE, uuid, "Friends", 2, 1, uuidI, uuidC);
+            if (0 != r)
+              bitch(Rd, "Internal error.", "Failed to create invenoryFolder record.");
+            strcpy(uuidC, uuidI);
+
+            uuid_generate_random(binuuidI);
+            uuid_unparse_lower(binuuidI, uuidI);
+// TODO - should check there isn't a folder with this UUID already.
+            D("Creating %s inventory folder for user %s.", "All", getStrH(Rd->stuff, "name"));
+            r += dbDoSomething(invFolderI, FALSE, uuid, "All", 2, 1, uuidI, uuidC);
+            if (0 != r)
+              bitch(Rd, "Internal error.", "Failed to create invenoryFolder record.");
+
+          for (i = 1; (NULL != sysFolders[i].name) && (0 == r); i++)
+          {
+            uuid_generate_random(binuuidI);
+            uuid_unparse_lower(binuuidI, uuidI);
+// TODO - should check there isn't a folder with this UUID already.
+            D("Creating %s inventory folder for user %s.", sysFolders[i].name, getStrH(Rd->stuff, "name"));
+            r += dbDoSomething(invFolderI, FALSE, uuid, sysFolders[i].name, sysFolders[i].type, 1, uuidI, uuidS);
+            if (0 != r)
+              bitch(Rd, "Internal error.", "Failed to create invenoryFolder record.");
+          }
+
+          if (0 == r)
+          {
+            // Create location record.
+            D("Creating home and last positions for user %s.",  getStrH(Rd->stuff, "name"));
+            if (0 != dbDoSomething(gUserI, FALSE, uuid))                                                        // LEAKY
+              bitch(Rd, "Internal error.", "Failed to create GridUser record.");
+            else
+            {
+              // Finally create auth record, so they can log in.
+              D("Creating auth record for user %s  %s.", uuid, getStrH(Rd->stuff, "name"));
+              if (0 != dbDoSomething(authI, FALSE, uuid, getStrH(Rd->stuff, "passwordSalt"), getStrH(Rd->stuff, "passwordHash"), "UserAccount", "00000000-0000-0000-0000-000000000000"))
+                bitch(Rd, "Internal error.", "Failed to create auth record.");
+            }
+          }
+
+          // load iar -m first last / password /opt/opensim_SC/backups/DefaultMember.IAR
+          simList *sims = getSims();
+          struct sysinfo info;
+          float  la;
+
+          sysinfo(&info);
+          la = info.loads[0]/65536.0;
+
+          for (i = 0; i < sims->num; i++)
+          {
+            char *sim = sims->sims[i], *name = getSimName(sims->sims[i]);
+
+            if (checkSimIsRunning(sim))
+            {
+              I("Loading default member IAR for %s %s in sim %s, this might take a couple of minutes.", first, last, name);
+              char *c = xmprintf("%s %s/%s send-keys -t '%s:%d' 'load iar -m %s %s / password /opt/opensim_SC/backups/DefaultMember.IAR' Enter",
+                Tcmd, scRun, Tsocket, Tconsole, i + 1, first, last);
+T(c);
+              int r = system(c);
+              if (!WIFEXITED(r))
+                E("tmux load iar command failed!");
+              else
+              {
+//              memset(toybuf, 0, sizeof(toybuf));
+//              snprintf(toybuf, sizeof(toybuf), "INITIALIZATION COMPLETE FOR %s", name);
+//              waitTmuxText(name, toybuf);
+//              I("%s is done starting up.", name);
+//              la = waitLoadAverage(la, loadAverageInc, simTimeOut);
+              }
+              free(c);
+              free(name);
+              break;
+            }
+            free(name);
+          }
+          freeSimList(sims);
+        }
+        free(first);
+      }
+    }
+  }
+  else
+    W("Not writing NULL UUID user!");
+  free(file);
+}
+
+static sesh *newSesh(reqData *Rd, boolean linky)
+{
+  unsigned char *md5hash = xzalloc(17);
+  char *toke_n_munchie, *munchie, *hashish, *t0, *t1;
+  char uuid[37];
+  uuid_t binuuid;
+  sesh *ret = &Rd->shs;
+
+T("new sesh %s %s %s", linky ? "linky" : "session", ret->UUID, ret->name);
+  if (linky)
+  {
+    Rd->lnk = xzalloc(sizeof(sesh));
+    ret = Rd->lnk;
+    ret->UUID = Rd->shs.UUID;
+  }
+
+  char buf[128];        // 512 bits.
+  int numBytes = getrandom((void *)buf, sizeof(buf), GRND_NONBLOCK);
+
+  // NOTE that getrandom() returns random bytes, which may include '\0'.
+  if (-1 == numBytes)
+  {
+    perror_msg("Unable to generate a suitable random number.");
+    // EAGAIN - not enough entropy, try again.
+    // EINTR  - signal handler interrupted it, try again.
+  }
+  else
+  {
+    t0 = qhex_encode(buf, sizeof(buf));
+    qstrcpy(ret->salt, sizeof(ret->salt), t0);
+    free(t0);
+//d("salt %s", ret->salt);
+    numBytes = getrandom((void *)buf, sizeof(buf), GRND_NONBLOCK);
+    if (-1 == numBytes)
+      perror_msg("Unable to generate a suitable random number.");
+    else
+    {
+      t0 = qhex_encode(buf, sizeof(buf));
+      qstrcpy(ret->seshID, sizeof(ret->seshID), t0);
+      free(t0);
+//d("seshID %s", ret->seshID);
+
+      ret->timeStamp[0].tv_nsec = UTIME_OMIT;
+      ret->timeStamp[0].tv_sec  = UTIME_OMIT;
+      if (-1 == clock_gettime(CLOCK_REALTIME, &ret->timeStamp[1]))
+        perror_msg("Unable to get the time.");
+      else
+      {
+        // tv_sec is a time_t, tv_nsec is a long, but the actual type of time_t isn't well defined, it's some sort of integer.
+        t0 = xmprintf("%s%ld.%ld", ret->seshID, (long) ret->timeStamp[1].tv_sec, ret->timeStamp[1].tv_nsec);
+        qstrcpy(ret->sesh, sizeof(ret->sesh), t0);
+//d("sesh %s", ret->sesh);
+        t1 = myHMAC(t0, FALSE);
+        free(t0);
+        munchie = xmprintf("%s%ld.%ld", t1, (long) ret->timeStamp[1].tv_sec, ret->timeStamp[1].tv_nsec);
+        free(t1);
+        qstrcpy(ret->munchie, sizeof(ret->munchie), munchie);
+//d("munchie %s", ret->munchie);
+// TODO - chicken and egg?  Used to be from stuff->UUID.
+        t1 = ret->UUID;
+        if (NULL == t1)
+        {
+          uuid_clear(binuuid);
+          uuid_unparse_lower(binuuid, uuid);
+          ret->UUID = xstrdup(uuid);
+        }
+        t0 = xmprintf("%s%s", ret->UUID, munchie);
+        free(munchie);
+        toke_n_munchie = myHMAC(t0, FALSE);
+        free(t0);
+        qstrcpy(ret->toke_n_munchie, sizeof(ret->toke_n_munchie), toke_n_munchie);
+//d("toke_n_munchie %s", ret->toke_n_munchie);
+        hashish = myHMACkey(ret->salt, toke_n_munchie, FALSE);
+        free(toke_n_munchie);
+        qstrcpy(ret->hashish, sizeof(ret->hashish), hashish);
+//d("hashish %s", ret->hashish);
+        t0 = myHMACkey(getStrH(Rd->configs, "pepper"), hashish, TRUE);
+        free(hashish);
+        qstrcpy(ret->leaf, sizeof(ret->leaf), t0);
+//d("leaf %s", ret->leaf);
+        free(t0);
+        ret->isLinky = linky;
+        setToken_n_munchie(Rd, linky);
+      }
+    }
+  }
+
+  free(md5hash);
+  return ret;
+}
+
+
+
+
+/* CRUD (Create, Read, Update, Delete)
+CRAP (Create, Replicate, Append, Process)
+Though I prefer -
+DAVE (Delete, Add, View, Edit), coz the names are shorter.  B-)
+On the other hand, list or browse needs to be added, which is why they have
+BREAD (Browse, Read, Edit, Add, Delete)
+CRUDL (Create, Read, Update, Delete, List)
+CRUDE (Create, Read, Update, Delete, Experience)
+Maybe -
+DAVEE (Delete, Add, View, Edit, Explore)
+*/
+
+//  lua.h has LUA_T* NONE, NIL, BOOLEAN, LIGHTUSERDATA, NUMBER, STRING, TABLE, FUNCTION, USERDATA, THREAD as defines, -1 - 8.
+//  These are the missing ones.  Then later we will have prim, mesh, script, sound, terrain, ...
+#define LUA_TGROUP      42
+#define LUA_TINTEGER    43
+#define LUA_TEMAIL      44
+#define LUA_TPASSWORD   45
+#define LUA_TFILE       46
+#define LUA_TIMAGE      47
+
+#define FLD_NONE        0
+#define FLD_EDITABLE    1
+#define FLD_HIDDEN      2
+#define FLD_REQUIRED    4
+
+typedef struct _inputField inputField;
+typedef struct _inputSub inputSub;
+typedef struct _inputForm inputForm;
+typedef struct _inputValue inputValue;
+
+typedef int   (*inputFieldValidFunc)    (reqData *Rd, inputForm *iF, inputValue *iV);
+typedef void  (*inputFieldShowFunc)     (reqData *Rd, inputForm *iF, inputValue *iV);
+typedef int   (*inputSubmitFunc)        (reqData *Rd, inputForm *iF, inputValue *iV);
+typedef void  (*inputFormShowFunc)      (reqData *Rd, inputForm *iF, inputValue *iV);
+
+struct _inputField
+{
+  char *name, *title, *help;
+  inputFieldValidFunc validate; // Alas C doesn't have any anonymous function standard.
+  inputFieldShowFunc web, console, gui;
+  inputField **group;           // If this is a LUA_TGROUP, then this will be a null terminated array of the fields in the group.
+//  database details
+//  lua file details
+  signed char type, flags;
+  short editLevel, viewLevel, viewLength, maxLength;
+};
+struct _inputSub
+{
+  char *name, *title, *help, *outputForm;
+  inputSubmitFunc submit;
+};
+struct _inputForm
+{
+  char *name, *title, *help;
+  qlisttbl_t *fields;           // qlisttbl coz iteration in order and lookup are important.
+  qhashtbl_t *subs;
+  inputFormShowFunc web, eWeb;  // display web, console, gui;
+// read function
+// write function
+};
+struct _inputValue
+{
+  inputField *field;
+  void *value;                  // If this is a LUA_TGROUP, then this will be a null.
+  short valid;                  // 0 for not yet validated, negative for invalid, positive for valid.
+  short source, index;
+};
+
+
+static int sessionValidate(reqData *Rd, inputForm *iF, inputValue *iV)
+{
+  int ret = 0;
+  boolean linky = FALSE;
+  char  *toke_n_munchie = "", *munchie = "", *hashish = "", *leaf = "", *timeStamp = "", *seshion = "", *seshID = "", *t0, *t1;
+
+  // In this case the session stuff has to come from specific places.
+  hashish        = Rd->queries->getstr(Rd->queries,     "hashish", true);
+//d("O hashish %s", hashish);
+  if (NULL != hashish)
+  {
+    char *t = xstrdup(hashish);
+    size_t sz = qB64_decode(t);
+
+// TODO - should validate the cookie version as well, if it was sent.
+//          Coz it later tries to delete the linky as if it was the cookie session, and might give us a chance to delete the old session.
+//          Though only if there's a munchie in the body?
+    I("Validating LINKY hashish %s", hashish);
+    free(hashish);
+    hashish = qhex_encode(t, sz);
+    free(t);
+    linky = TRUE;
+  }
+  else
+  {
+    toke_n_munchie      = getStrH(Rd->cookies,  "toke_n_munchie");
+//    munchie           = getStrH(Rd->body,     "munchie");
+    hashish             = Rd->cookies->getstr(Rd->cookies, "hashish", true);
+    if (('\0' == toke_n_munchie[0]) || ((NULL == hashish)))
+    {
+      if (strcmp("logout", Rd->doit) == 0)
+      {
+        I("Not checking session, coz we are logging out.");
+        Rd->shs.status = SHS_NUKE;
+        return ret;
+      }
+      bitchSession(Rd, "Invalid session.", "No or blank hashish or toke_n_munchie.");
+      Rd->shs.status = SHS_NONE;
+      ret++;
+    }
+    else
+      I("Validating SESSION hashish %s", hashish);
+  }
+
+//d("O toke_n_munchie %s", toke_n_munchie);
+//d("O munchie %s", munchie);
+  if (0 == ret)
+  {
+    struct stat st;
+    struct timespec now;
+
+    leaf = myHMACkey(getStrH(Rd->configs, "pepper"), hashish, TRUE);
+//d("leaf %s", leaf);
+    if (linky)
+      t0 = xmprintf("%s/sessions/%s.linky", scCache, leaf);
+    else
+      t0 = xmprintf("%s/sessions/%s.lua", scCache, leaf);
+
+    qhashtbl_t *tnm = qhashtbl(0, 0);
+    ret = LuaToHash(Rd, t0, "toke_n_munchie", tnm, ret, &st, &now, "session");
+    free(t0);
+
+    if (0 != ret)
+    {
+      // This might be coz it's a stale session that was deleted already, so shouldn't complain really if they are just getting the login page.
+      // They might also have a stale doit and form cookie.
+//      bitchSession(Rd, "Invalid session.", "No session file.");
+      bitchSession(Rd, "", "No session file.");
+      ret++;
+    }
+    else
+    {
+      // This is apparently controversial, I added it coz some of the various security docs suggested it's a good idea.
+      // https://security.stackexchange.com/questions/139952/why-arent-sessions-exclusive-to-an-ip-address?rq=1
+      //        Includes various reasons why it's bad.
+      // Another good reason why it is bad, TOR.
+      // So should make this a user option, like Mantis does.
+      if (strcmp(getStrH(Rd->headers, "REMOTE_ADDR"), getStrH(tnm, "IP")) != 0)
+      {
+        bitchSession(Rd, "Wrong IP for session.", "Session IP doesn't match.");
+        ret++;
+      }
+      else
+      {
+        timeStamp = xmprintf("%ld.%ld", (long) st.st_mtim.tv_sec, st.st_mtim.tv_nsec);
+//d("timeStamp %s", timeStamp);
+        seshion = xmprintf("%s%s", tnm->getstr(tnm, "seshID", false), timeStamp);
+//d("sesh %s", seshion);
+        t0 = myHMAC(seshion, FALSE);
+        munchie = xmprintf("%s%s", t0, timeStamp);
+//d("munchie %s", munchie);
+        free(t0);
+        free(timeStamp);
+        t1 = getStrH(Rd->body, "munchie");
+        if ('\0' != t1[0])
+        {
+          if (strcmp(t1, munchie) != 0)
+          {
+// TODO if newbie user has not logged out, but clicks the email linky, and they end up on a new browser tab, they'll see this on the logged in tab.
+            bitchSession(Rd, "Wrong munchie for session, may have been eaten, please try again.", "HMAC(seshID + timeStamp) != munchie");
+            ret++;
+          }
+          else
+          {
+            t0 = xmprintf("%s%s", getStrH(tnm, "UUID"), munchie);
+            t1 = myHMAC(t0, FALSE);
+            free(t0);
+
+//d("toke_n_munchie %s", t1);
+            if (strcmp(t1, toke_n_munchie) != 0)
+            {
+              bitchSession(Rd, "Wrong toke_n_munchie for session.", "HMAC(UUID + munchie) != toke_n_munchie");
+              ret++;
+            }
+            free(t1);
+          }
+
+          if (linky)
+          {
+            t0 = xmprintf("%s%s", getStrH(tnm, "UUID"), munchie);
+            t1 = myHMAC(t0, FALSE);
+            free(t0);
+            toke_n_munchie = t1;
+//d("toke_n_munchie %s", t1);
+          }
+          t1 = myHMACkey(getStrH(tnm, "salt"), toke_n_munchie, FALSE);
+//d("hashish %s", t1);
+          if (strcmp(t1, hashish) != 0)
+          {
+            bitchSession(Rd, "Wrong hashish for session.", "HMAC(toke_n_munchie + salt) != hashish");
+            ret++;
+          }
+          free(t1);
+        }
+
+// TODO - should carefully review all of this, especially the moving of session data to and fro.
+        if (0 == ret)
+        {
+W("Validated session.");
+          sesh *shs = &Rd->shs;
+
+          qstrcpy(shs->leaf,            sizeof(shs->leaf),              leaf);
+          if (NULL != shs->name)        free(shs->name);
+          shs->name =                                                   tnm->getstr(tnm, "name",   true);
+          if (NULL != shs->UUID)        free(shs->UUID);
+          shs->UUID =                                                   tnm->getstr(tnm, "UUID",   true);
+          if (linky)
+          {
+W("Validated session linky.");
+            addStrL(Rd->messages, "Congratulations, you have validated your new account.  Now you can log onto the web site.");
+            addStrL(Rd->messages, "NOTE - you wont be able to log onto the grid until your new account has been approved.");
+            Rd->lnk = xzalloc(sizeof(sesh));
+            Rd->lnk->status = SHS_NUKE;
+            qstrcpy(Rd->lnk->leaf, sizeof(Rd->lnk->leaf), leaf);
+            freeSesh(Rd, linky, FALSE);
+            qstrcpy(Rd->lnk->leaf, sizeof(Rd->lnk->leaf), "");
+            Rd->doit = "validate";
+            Rd->output = "accountLogin";
+            Rd->form = "accountLogin";
+// TODO - we might want to delete their old .lua session as well.  Maybe?  Don't think we have any suitable codes to find it.
+          }
+          else
+          {
+            char *level = tnm->getstr(tnm, "level",  false);
+
+            // Check for session timeouts etc.
+            if (now.tv_sec > st.st_mtim.tv_sec + seshTimeOut)
+            {
+              bitch(Rd, "Session timed out.", "No activity for longer than seshTimeOut, session is ancient.");
+              ret++;
+              Rd->shs.status = SHS_ANCIENT;
+            }
+            else if (now.tv_sec > st.st_mtim.tv_sec + idleTimeOut)
+            {
+              bitch(Rd, "Session idled out.", "No activity for longer than idleTimeOut, session is idle.");
+              ret++;
+              Rd->shs.status = SHS_IDLE;
+            }
+            else if (now.tv_sec > st.st_mtim.tv_sec + seshRenew)
+            {
+              D("Session needs renewing.");
+              Rd->shs.status = SHS_RENEW;
+            }
+            else
+              Rd->shs.status = SHS_VALID;
+
+            if (NULL == level)
+              level = "-256";
+            qstrcpy(shs->sesh,                  sizeof(shs->sesh),              seshion);
+            qstrcpy(shs->toke_n_munchie,        sizeof(shs->toke_n_munchie),    toke_n_munchie);
+            qstrcpy(shs->hashish,               sizeof(shs->hashish),           hashish);
+            qstrcpy(shs->munchie,               sizeof(shs->munchie),           munchie);
+            qstrcpy(shs->salt,                  sizeof(shs->salt),              tnm->getstr(tnm, "salt",   false));
+            qstrcpy(shs->seshID,                sizeof(shs->seshID),            tnm->getstr(tnm, "seshID", false));
+            shs->level =                                                        atoi(level);
+// TODO - get level from somewhere and stuff it in shs.
+            shs->timeStamp[0].tv_nsec = UTIME_OMIT;
+            shs->timeStamp[0].tv_sec  = UTIME_OMIT;
+            memcpy(&shs->timeStamp[1], &st.st_mtim, sizeof(struct timespec));
+          }
+        }
+
+        qhashtbl_obj_t obj;
+
+        memset((void*)&obj, 0, sizeof(obj));
+        tnm->lock(tnm);
+        while(tnm->getnext(tnm, &obj, false) == true)
+        {
+          char *n = obj.name;
+
+          if ((strcmp("salt", n) != 0) && (strcmp("seshID", n) != 0)  && (strcmp("UUID", n) != 0))
+          {
+t("SessionValidate() Lua read %s = %s", n, (char *) obj.data);
+            Rd->stuff->putstr(Rd->stuff, obj.name, (char *) obj.data);
+          }
+        }
+        tnm->unlock(tnm);
+
+// TODO - check this.
+//      Rd->database->putstr(Rd->database, "UserAccounts.PrincipalID", tnm->getstr(tnm, "UUID", false));
+      }
+      free(munchie);
+      free(seshion);
+    }
+    free(leaf);
+    tnm->free(tnm);
+    free(hashish);
+  }
+
+  return ret;
+}
+
+static void sessionWeb(reqData *Rd, inputForm *iF, inputValue *iV)
+{
+  HTMLhidden(Rd->reply, iV->field->name, iV->value);
+}
+
+/*
+static int UUIDValidate(reqData *Rd, inputForm *iF, inputValue *iV)
+{
+  int ret = 0;
+  char *UUID = (char *) iV->value;
+
+  if (36 != strlen(UUID))
+  {
+    bitch(Rd, "Internal error.", "UUID isn't long enough.");
+    ret++;
+  }
+// TODO - check the characters and dashes as well.
+
+  if (0 == ret)
+    Rd->stuff->putstr(Rd->stuff, "UUID", UUID);
+  return ret;
+}
+
+static void UUIDWeb(reqData *Rd, inputForm *iF, inputValue *iV)
+{
+  HTMLhidden(Rd->reply, iV->field->name, iV->value);
+}
+*/
+
+static int nameValidate(reqData *Rd, inputForm *iF, inputValue *iV)
+{
+  int ret = 0;
+  unsigned char *name;  // We have to be unsigned coz of isalnum().
+  char *where = NULL;
+
+  name = xstrdup(iV->value);
+
+  if ((NULL == name) || ('\0' == name[0]))
+  {
+    bitch(Rd, "Please supply an account name.", "None supplied.");
+    ret++;
+  }
+  else
+  {
+    int l0 = strlen(name), l1 = 0, l2 = 0;
+
+    if (0 == l0)
+    {
+      bitch(Rd, "Please supply an account name.", "Name is empty.");
+      ret++;
+    }
+    else
+    {
+      int i;
+      unsigned char *s = NULL;
+
+      for (i = 0; i < l0; i++)
+      {
+        if (isalnum(name[i]) == 0)
+        {
+
+          if ((' ' == name[i] /*&& (NULL == s)*/))
+          {
+            s = &name[i];
+            *s++ = '\0';
+            while(' ' == *s)
+            {
+              i++;
+              s++;
+            }
+            l1 = strlen(name);
+            l2 = strlen(s);
+
+            // Apparently names are not case sensitive on login, but stored with case in the database.
+            //  I confirmed that, can log in no matter what case you use.
+            //  Seems to be good security for names to be case insensitive.
+            // UserAccounts FirstName and LastName fields are both varchar(64) utf8_general_ci.
+            // The MySQL docs say that the "_ci" bit means comparisons will be case insensitive.  So that should work fine.
+
+            // SL docs say 31 characters each for first and last name.  UserAccounts table is varchar(64) each.  userinfo has varchar(50) for the combined name.
+            // The userinfo table seems to be obsolete.
+            // Singularity at least limits the total name to 64.
+            // I can't find any limitations on characters allowed, but I only ever see letters and digits used.  Case is stored, but not significant.
+            // OpenSims "create user" console command doesn't sanitize it at all, even crashing on some names.
+          }
+          else
+          {
+            bitch(Rd, "First and last names are limited to ordinary letters and digits, no special characters or fonts.", "");
+            ret++;
+            break;
+          }
+// TODO - compare first, last, and fullname against god names, complain and fail if there's a match.
+        }
+      }
+
+      if (NULL == s)
+      {
+        bitch(Rd, "Account names have to be two words.", "");
+        ret++;
+      }
+      if ((31 < l1) || (31 < l2))
+      {
+        bitch(Rd, "First and last names are limited to 31 letters each.", "");
+        ret++;
+      }
+      if ((0 == l1) || (0 == l2))
+      {
+        bitch(Rd, "First and last names have to be one or more ordinary letters or digits each.", "");
+        ret++;
+      }
+
+      if (0 == ret)
+      {
+        Rd->stuff->putstr(Rd->stuff, "firstName", name);
+        Rd->stuff->putstr(Rd->stuff, "lastName", s);
+        Rd->stuff->putstrf(Rd->stuff, "name", "%s %s", name, s);
+      }
+    }
+  }
+  free(name);
+
+  return ret;
+}
+
+static void nameWeb(reqData *Rd, inputForm *oF, inputValue *oV)
+{
+  if (oV->field->flags & FLD_HIDDEN)
+    HTMLhidden(Rd->reply, oV->field->name, oV->value);
+  else
+    HTMLtext(Rd->reply, "text", oV->field->title, oV->field->name, oV->value, oV->field->viewLength, oV->field->maxLength, oV->field->flags & FLD_REQUIRED);
+}
+
+
+static int passwordValidate(reqData *Rd, inputForm *iF, inputValue *iV)
+{
+  int ret = 0;
+  char *password = (char *) iV->value, *salt = getStrH(Rd->stuff, "passSalt"), *hash = getStrH(Rd->stuff, "passHash");
+
+  if ((NULL == password) || ('\0' == password[0]))
+  {
+    bitch(Rd, "Please supply a password.", "Password empty or missing.");
+    ret++;
+  }
+  else if (('\0' != salt[0]) && ('\0' != hash[0]) && (strcmp("psswrd", iV->field->name) == 0))
+  {
+    D("Comparing passwords. %s  %s  %s", password, salt, hash);
+    char *h = checkSLOSpassword(Rd, salt, password, hash, "Passwords are not the same.");
+
+    if (NULL == h)
+      ret++;
+    else
+      free(h);
+  }
+
+// TODO - once the password is validated, store it as the salt and hash.
+//          If it's an existing account, compare it?  Or do that later?
+  if (0 == ret)
+    Rd->stuff->putstr(Rd->stuff, "password", password);
+
+  return ret;
+}
+
+static void passwordWeb(reqData *Rd, inputForm *oF, inputValue *oV)
+{
+  HTMLtext(Rd->reply, "password", oV->field->title, oV->field->name, "", oV->field->viewLength, oV->field->maxLength, oV->field->flags & FLD_REQUIRED);
+  Rd->reply->addstr(Rd->reply,  "<p>While viewers will usually remember your name and password for you, you'll need to remember it for this web site to. &nbsp; "
+                                "I highly recommend using a password manager. &nbsp; KeePass and it's variations is a great password manager.</p>\n");
+}
+
+static int emailValidate(reqData *Rd, inputForm *iF, inputValue *iV)
+{
+//  inputField **group = iV->field->group;
+  int ret = 0, i;
+  boolean notSame = FALSE;
+
+  i = iV->index;
+  if (2 == i)
+  {
+    char *email = (char *) iV->value;
+    char *emayl = (char *) (iV + 1)->value;
+
+    if ((NULL == email) || (NULL == emayl) || ('\0' == email[0]) || ('\0' == emayl[0]))
+    {
+      bitch(Rd, "Please supply an email address.", "None supplied.");
+      ret++;
+    }
+    else if (strcmp(email, emayl) != 0)
+    {
+      bitch(Rd, "Email addresses are not the same.", "");
+      ret++;
+      notSame = TRUE;
+    }
+    else if (!qstr_is_email(email))
+    {
+      bitch(Rd, "Please supply a proper email address.", "Failed qstr_is_email()");
+      ret++;
+    }
+    else
+    {
+// TODO - do other email checks - does the domain exist, ..
+    }
+
+    if ((NULL != email) && (NULL != emayl))
+    {
+      char *t0 = qurl_encode(email, strlen(email));
+
+      // In theory it's the correct thing to do to NOT load email into stuff on failure,
+      // In practice, that means it wont show the old email and emayl in the create page when they don't match.
+      if ((0 == ret) || notSame)
+        Rd->stuff->putstrf(Rd->stuff, "email", "%s", t0);
+      free(t0);
+    }
+    if ((NULL != email) && (NULL != emayl))
+    {
+      char *t1 = qurl_encode(emayl, strlen(emayl));
+
+      Rd->stuff->putstrf(Rd->stuff, "emayl", "%s", t1);
+      free(t1);
+    }
+  }
+
+  return ret;
+}
+static void emailWeb(reqData *Rd, inputForm *oF, inputValue *oV)
+{
+  HTMLtext(Rd->reply, "email", oV->field->title, oV->field->name, getStrH(Rd->stuff, oV->field->name), oV->field->viewLength, oV->field->maxLength, oV->field->flags & FLD_REQUIRED);
+  Rd->reply->addstrf(Rd->reply, "<p>An email will be sent from %s@%s, and it might be in your spam folder, coz these sorts of emails sometimes end up there. &nbsp; "
+                    "You should add that email address to your contacts, or otherwise let it through your spam filter.</p>",
+                    "grid_no_reply", Rd->Host);
+}
+
+
+char *months[] =
+{
+  "january",
+  "february",
+  "march",
+  "april",
+  "may",
+  "june",
+  "july",
+  "august",
+  "september",
+  "october",
+  "november",
+  "december"
+};
+static int DoBValidate(reqData *Rd, inputForm *iF, inputValue *iV) 
+{
+  int ret = 0, i;
+  char *t0, *t1;
+//  inputField **group = iV->field->group;
+
+  i = iV->index;
+  if (2 == i)
+  {
+    t0 = (char *) iV->value;
+    if ((NULL == t0) || ('\0' == t0[0]))
+    {
+      bitch(Rd, "Please supply a year of birth.", "None supplied.");
+      ret++;
+    }
+    else
+    {
+      i = atoi(t0);
+// TODO - get this to use current year instead of 2020.
+      if ((1900 > i) || (i > 2020))
+      {
+        bitch(Rd, "Please supply a year of birth.", "Out of range.");
+        ret++;
+      }
+      else if (i < 1901)
+      {
+        bitch(Rd, "Please supply a proper year of birth.", "Out of range, too old.");
+        ret++;
+      }
+      else if (i >2004)
+      {
+        bitch(Rd, "This grid is Adult rated, you are too young.", "Out of range, too young.");
+        ret++;
+      }
+    }
+    t1 = (char *) (iV + 1)->value;
+    if ((NULL == t1) || ('\0' == t1[0]))
+    {
+      bitch(Rd, "Please supply a month of birth.", "None supplied.");
+      ret++;
+    }
+    else
+    {
+      for (i = 0; i < 12; i++)
+      {
+        if (strcmp(months[i], t1) == 0)
+          break;
+      }
+      if (12 == i)
+      {
+        bitch(Rd, "Please supply a month of birth.", "Out of range");
+        ret++;
+      }
+    }
+
+    if (0 == ret)
+    {
+      Rd->stuff->putstr(Rd->stuff, "year",  t0);
+      Rd->stuff->putstr(Rd->stuff, "month", t1);
+      Rd->stuff->putstrf(Rd->stuff, "DoB", "%s %s", t0, t1);
+    }
+  }
+
+  return ret;
+}
+static void DoByWeb(reqData *Rd, inputForm *oF, inputValue *oV)
+{
+  char *tmp = xmalloc(16), *t;
+  int i, d;
+
+  Rd->reply->addstr(Rd->reply, "<label>Date of birth :<table><tr><td>\n");
+  HTMLselect(Rd->reply, NULL, oV->field->name);
+  t = getStrH(Rd->stuff, "year");
+  if (NULL == t)
+    d = -1;
+  else
+    d = atoi(t);
+  HTMLoption(Rd->reply, "", FALSE);
+  for (i = 1900; i <= 2020; i++)
+  {
+    boolean sel = FALSE;
+
+    if (i == d)
+      sel = TRUE;
+    sprintf(tmp, "%d", i);
+    HTMLoption(Rd->reply, tmp, sel);
+  }
+  free(tmp);
+  HTMLselectEndNo(Rd->reply);
+}
+static void DoBmWeb(reqData *Rd, inputForm *oF, inputValue *oV)
+{
+  char *t;
+  int i, d;
+
+  Rd->reply->addstr(Rd->reply, "</td><td>\n");
+  HTMLselect(Rd->reply, NULL, oV->field->name);
+  t = getStrH(Rd->stuff, "month");
+  HTMLoption(Rd->reply, "", FALSE);
+  for (i = 0; i <= 11; i++)
+  {
+    boolean sel = FALSE;
+
+    if ((NULL != t) && (strcmp(t, months[i]) == 0))
+      sel = TRUE;
+    HTMLoption(Rd->reply, months[i], sel);
+  }
+  HTMLselectEndNo(Rd->reply);
+  Rd->reply->addstr(Rd->reply, "</td></tr></table></label>\n");
+}
+static void DoBWeb(reqData *Rd, inputForm *oF, inputValue *oV)
+{
+}
+
+static int legalValidate(reqData *Rd, inputForm *iF, inputValue *iV)
+{
+  int ret = 0, i;
+  char *t;
+  inputField **group = iV->field->group;
+
+  i = iV->index;
+  if (2 == i)
+  {
+    t = (char *) iV->value;
+    if ((NULL == t) || (strcmp("on", t) != 0))
+    {
+      bitch(Rd, "You must be an adult to enter this site.", "");
+      ret++;
+    }
+    else
+      Rd->stuff->putstr(Rd->stuff, "adult", t);
+    t = (char *) (iV + 1)->value;
+    if ((NULL == t) || (strcmp("on", t) != 0))
+    {
+      bitch(Rd, "You must agree to the Terms & Conditions of Use.", "");
+      ret++;
+    }
+    else
+      Rd->stuff->putstr(Rd->stuff, "agree", t);
+  }
+
+  return ret;
+}
+static void adultWeb(reqData *Rd, inputForm *oF, inputValue *oV)
+{
+  HTMLcheckBox(Rd->reply, oV->field->name, oV->field->title, !strcmp("on", getStrH(Rd->body, "adult")), oV->field->flags & FLD_REQUIRED);
+}
+static void agreeWeb(reqData *Rd, inputForm *oF, inputValue *oV)
+{
+  HTMLcheckBox(Rd->reply, oV->field->name, oV->field->title, !strcmp("on", getStrH(Rd->body, "agree")), oV->field->flags & FLD_REQUIRED);
+}
+static void legalWeb(reqData *Rd, inputForm *oF, inputValue *oV)
+{
+}
+static void ToSWeb(reqData *Rd, inputForm *oF, inputValue *oV)
+{
+  Rd->reply->addstrf(Rd->reply, "<h2>Terms of Service</h2><pre>%s</pre>\n", getStrH(Rd->configs, "ToS"));
+}
+
+static int voucherValidate(reqData *Rd, inputForm *oF, inputValue *oV)
+{
+  int ret = 0;
+  char *voucher = (char *) oV->value;
+
+  if ((NULL == voucher) || ('\0' == voucher[0]))
+  {
+    bitch(Rd, "Please fill in the 'Voucher' section.", "None supplied.");
+    ret++;
+  }
+
+  if ((0 == ret) && (NULL != voucher))
+    Rd->stuff->putstr(Rd->stuff, "voucher", voucher);
+
+  return ret;
+}
+static void voucherWeb(reqData *Rd, inputForm *oF, inputValue *oV)
+{
+    HTMLtext(Rd->reply, "text", oV->field->title, oV->field->name, oV->value, oV->field->viewLength, oV->field->maxLength, oV->field->flags & FLD_REQUIRED);
+}
+
+static int aboutMeValidate(reqData *Rd, inputForm *oF, inputValue *oV)
+{
+  int ret = 0;
+  char *about = (char *) oV->value;
+
+  if ((NULL == about) || ('\0' == about[0]))
+  {
+    bitch(Rd, "Please fill in the 'About me' section.", "None supplied.");
+    ret++;
+  }
+
+  if ((0 == ret) && (NULL != about))
+    Rd->stuff->putstr(Rd->stuff, "aboutMe", about);
+
+  return ret;
+}
+
+static void aboutMeWeb(reqData *Rd, inputForm *oF, inputValue *oV)
+{
+  // For maxlength - the MySQL database field is type text, which has a max length of 64 Kilobytes byets, but characters might take up 1 - 4 bytes, and maxlength is in characters.
+  // For rows and cols, seems a bit broken, I ask for 5/42, I get 6,36.  In world it seems to be 7,46
+// TODO - check against the limit for in world profiles, coz this will become that.
+// TODO - validate aboutMe, it should not be empty, and should not be longer than 64 kilobytes.
+  HTMLtextArea(Rd->reply, oV->field->name, oV->field->title, 7, oV->field->viewLength, 4, oV->field->maxLength, "Describe yourself here.", "off", "true", "soft", oV->value, FALSE, FALSE);
+}
+
+static void accountWebHeaders(reqData *Rd, inputForm *oF)  //, char *name)
+{
+  char *linky = checkLinky(Rd);
+
+  HTMLheader(Rd->reply, "<!--#echo var=\"grid\" --> account manager");
+  Rd->reply->addstrf(Rd->reply, "<h1><!--#echo var=\"grid\" --> account manager</h1>\n");
+  if (NULL != Rd->shs.name)
+  {
+    char *nm = qstrreplace("tr", xstrdup(Rd->shs.name), " ",  "+");
+
+    Rd->reply->addstrf(Rd->reply, "<h3>You are <a href='https://%s%s%s?user=%s'>%s</a></h3>\n", Rd->Host, Rd->Script, Rd->Path, nm, Rd->shs.name);
+    Rd->reply->addstr(Rd->reply, linky);
+    free(nm);
+  }
+  free(linky);
+  if (0 != Rd->errors->size(Rd->messages))
+    HTMLlist(Rd->reply, "messages -", Rd->messages);
+  if (NULL != oF->help)
+    Rd->reply->addstrf(Rd->reply, "<p>%s</p>\n", oF->help);
+  HTMLform(Rd->reply, "", Rd->shs.munchie);
+    HTMLhidden(Rd->reply, "form", oF->name);
+}
+
+static void accountWebFields(reqData *Rd, inputForm *oF, inputValue *oV)
+{
+  int count = oF->fields->size(oF->fields), i;
+
+  for (i = 0; i < count; i++)
+  {
+    if (NULL != oV[i].field->web)
+      oV[i].field->web(Rd, oF, &oV[i]);
+    if ((NULL != oV[i].field->help) && ('\0' != oV[i].field->help[0]))
+      Rd->reply->addstrf(Rd->reply, "<p>%s</p>\n", oV[i].field->help);
+//d("accountWebFeilds(%s, %s)", oF->name, oV[i].field->name);
+  }
+}
+
+static void accountWebSubs(reqData *Rd, inputForm *oF)
+{
+  qhashtbl_obj_t obj;
+
+  Rd->reply->addstrf(Rd->reply, "<input type='submit' disabled style='display: none' aria-hidden='true' />\n"); // Stop Enter key on text fields triggering the first submit button.
+  memset((void*)&obj, 0, sizeof(obj)); // must be cleared before call
+  oF->subs->lock(oF->subs);
+  while(oF->subs->getnext(oF->subs, &obj, false) == true)
+  {
+    inputSub *sub = (inputSub *) obj.data;
+    if ('\0' != sub->title[0])
+      HTMLbutton(Rd->reply, sub->name, sub->title);
+//d("accountWebSubs(%s, %s '%s')", oF->name, sub->name, sub->title);
+  }
+  oF->subs->unlock(oF->subs);
+}
+
+static void accountWebFooter(reqData *Rd, inputForm *oF)
+{
+  if (0 != Rd->errors->size(Rd->errors))
+    HTMLlist(Rd->reply, "errors -", Rd->errors);
+  HTMLformEnd(Rd->reply);
+  HTMLfooter(Rd->reply);
+}
+
+static void accountAddWeb(reqData *Rd, inputForm *oF, inputValue *oV)
+{
+  accountWebHeaders(Rd, oF);
+    accountWebFields(Rd, oF, oV);
+    accountWebSubs(Rd, oF);
+  accountWebFooter(Rd, oF);
+}
+
+static void accountLoginWeb(reqData *Rd, inputForm *oF, inputValue *oV)
+{
+  if (NULL != Rd->shs.name)     free(Rd->shs.name);
+  Rd->shs.name = NULL;
+  if (NULL != Rd->shs.UUID)     free(Rd->shs.UUID);
+  Rd->shs.UUID = NULL;
+  accountWebHeaders(Rd, oF);
+    accountWebFields(Rd, oF, oV);
+    accountWebSubs(Rd, oF);
+  accountWebFooter(Rd, oF);
+}
+
+// TODO - accountViewWeb() and accountViewWeb() should view and edit arbitrary accounts the user is not logged in as,
+//          but limit things based on being that viewed / edited account, and the users level.
+static void accountViewWeb(reqData *Rd, inputForm *oF, inputValue *oV)
+{
+  char  *name           = getStrH(Rd->database, "Lua.name"),
+        *level          = getStrH(Rd->database, "UserAccounts.UserLevel"),
+        *email          = getStrH(Rd->database, "UserAccounts.Email"),
+        *voucher        = getStrH(Rd->database, "Lua.voucher"),
+        *about          = getStrH(Rd->database, "Lua.aboutMe");
+  time_t crtd = atol(getStrH(Rd->database, "UserAccounts.Created"));
+
+  accountWebHeaders(Rd, oF);
+    accountWebFields(Rd, oF, oV);
+    Rd->reply->addstrf(Rd->reply, "<p><font size='5'><span style='font-size: x-large'><b>Name :</b></span></font> %s</p>", name);
+    Rd->reply->addstrf(Rd->reply, "<p><font size='5'><span style='font-size: x-large'><b>Title / level :</b></span></font> %s / %s</p>", getLevel(atoi(level)), level);
+    Rd->reply->addstrf(Rd->reply, "<p><font size='5'><span style='font-size: x-large'><b>Date of birth :</b></span></font> %s</p>", getStrH(Rd->database, "Lua.DoB"));
+    Rd->reply->addstrf(Rd->reply, "<p><font size='5'><span style='font-size: x-large'><b>Created :</b></span></font> %s</p>", ctime(&crtd));
+    Rd->reply->addstrf(Rd->reply, "<p><font size='5'><span style='font-size: x-large'><b>Email :</b></span></font> %s</p>", email);
+    Rd->reply->addstrf(Rd->reply, "<p><font size='5'><span style='font-size: x-large'><b>UUID :</b></span></font> %s</p>", getStrH(Rd->database, "UserAccounts.PrincipalID"));
+    Rd->reply->addstrf(Rd->reply, "<p><font size='5'><span style='font-size: x-large'><b>Voucher :</b></span></font> %s</p>", voucher);
+    HTMLtextArea(Rd->reply, "aboutMe", "About", 7, 50, 4, 16384, "", "off", "true", "soft", about, FALSE, TRUE);
+    accountWebSubs(Rd, oF);
+  accountWebFooter(Rd, oF);
+}
+
+static void accountEditWeb(reqData *Rd, inputForm *oF, inputValue *oV)
+{
+  char  *name           = getStrH(Rd->database, "Lua.name"),
+        *level          = getStrH(Rd->database, "UserAccounts.UserLevel"),
+        *email          = getStrH(Rd->database, "UserAccounts.Email"),
+        *voucher        = getStrH(Rd->database, "Lua.voucher"),
+        *about          = getStrH(Rd->database, "Lua.aboutMe"),
+        *lvl            = getLevel(atoi(level));
+  short lv              = atoi(level);
+
+  accountWebHeaders(Rd, oF);
+    accountWebFields(Rd, oF, oV);
+//    HTMLtext(Rd->reply, "password", "Old password", "password", "", 16, 0, FALSE);
+//    Rd->reply->addstr(Rd->reply, "<p>Warning, the limit on password length is set by your viewer, some can't handle longer than 16 characters.</p>\n");
+////    HTMLtext(Rd->reply, "title", "text", "title", getStrH(Rh->stuff, "title"), 16, 64, TRUE);
+
+    HTMLhidden(Rd->reply, "user", name);
+    Rd->reply->addstrf(Rd->reply, "<p><font size='5'><span style='font-size: x-large'><b>Name :</b></span></font> %s</p>", name);
+//    Rd->reply->addstrf(Rd->reply, "<p><font size='5'><span style='font-size: x-large'><b>Email :</b></span></font> %s</p>", email);
+    HTMLtextArea(Rd->reply, "aboutMe", "About", 7, 50, 4, 16384, "", "off", "true", "soft", about, FALSE, TRUE);
+    Rd->reply->addstrf(Rd->reply, "<p><font size='5'><span style='font-size: x-large'><b>Voucher :</b></span></font> %s</p>", voucher);
+
+    if (200 <= Rd->shs.level)
+    {
+      qlisttbl_obj_t obj;
+
+      HTMLselect(Rd->reply, "level", "level");
+      memset((void*)&obj, 0, sizeof(obj)); // must be cleared before call
+      accountLevels->lock(accountLevels);
+      while(accountLevels->getnext(accountLevels, &obj, NULL, false) == true)
+      {
+        boolean is = false;
+        short l = atoi((char *) obj.name);
+
+        if (strcmp(lvl, (char *) obj.data) == 0)
+          is = true;
+
+//      if ((is) || ((l <= Rd->shs.level) && (l != -200) && (l != -100) && (l != -50))) // Not above our pay grade, not newbie, validated, nor vouched for.
+        if ((is) || ((l <= Rd->shs.level) && (lv <= l)))                                // As per discussions, can't lower level.  Do that in the console.
+          HTMLoption(Rd->reply, (char *) obj.data, is);
+      }
+      accountLevels->unlock(accountLevels);
+      HTMLselectEnd(Rd->reply);
+
+      Rd->reply->addstrf(Rd->reply, "<p><dl>");
+      Rd->reply->addstrf(Rd->reply, "<dt>disabled</dt><dd>Account cannot log in anywhere.</dd>");
+      Rd->reply->addstrf(Rd->reply, "<dt>newbie</dt><dd>Newly created account, not yet validated.</dd>");
+      Rd->reply->addstrf(Rd->reply, "<dt>validated</dt><dd>Newly created account, they have clicked on the validation link in their validation email.</dd>");
+      Rd->reply->addstrf(Rd->reply, "<dt>vouched for</dt><dd>Someone has vouched for this person.</dd>");
+      Rd->reply->addstrf(Rd->reply, "<dt>approved</dt><dd>This person is approved, and can log into the world.</dd>");
+      Rd->reply->addstrf(Rd->reply, "<dt>god</dt><dd>This is a god admin person.</dd>");
+      Rd->reply->addstrf(Rd->reply, "</dl></p>");
+    }
+    else
+      Rd->reply->addstrf(Rd->reply, "<p><font size='5'><span style='font-size: x-large'><b>Title / level :</b></span></font> %s / %s</p>", lvl, level);
+
+    accountWebSubs(Rd, oF);
+  accountWebFooter(Rd, oF);
+}
+
+
+static int accountRead(reqData *Rd, char *uuid, char *firstName, char *lastName)
+{
+  int ret = 0, rt = -1;
+  struct stat st;
+  struct timespec now;
+  qhashtbl_t *tnm = qhashtbl(0, 0);
+  uuid_t binuuid;
+  rowData *rows = NULL;
+
+  // Setup the database stuff.
+  static dbRequest *uuids = NULL;
+  if (NULL == uuids)
+  {
+    static char *szi[] = {"PrincipalID", NULL};
+    static char *szo[] = {NULL};
+    uuids = xzalloc(sizeof(dbRequest));
+    uuids->table = "UserAccounts";
+    uuids->inParams  = szi;
+    uuids->outParams = szo;
+    uuids->where = "PrincipalID=?";
+    dbRequests->addfirst(dbRequests, &uuids, sizeof(dbRequest *));
+  }
+  static dbRequest *acnts = NULL;
+  if (NULL == acnts)
+  {
+    static char *szi[] = {"FirstName", "LastName", NULL};
+    static char *szo[] = {NULL};
+    acnts = xzalloc(sizeof(dbRequest));
+    acnts->table = "UserAccounts";
+    acnts->inParams  = szi;
+    acnts->outParams = szo;
+    acnts->where = "FirstName=? and LastName=?";
+    dbRequests->addfirst(dbRequests, &acnts, sizeof(dbRequest *));
+  }
+  static dbRequest *auth = NULL;
+  if (NULL == auth)
+  {
+    static char *szi[] = {"UUID", NULL};
+    static char *szo[] = {"passwordSalt", "passwordHash", NULL};
+    auth = xzalloc(sizeof(dbRequest));
+    auth->table = "auth";
+    auth->inParams  = szi;
+    auth->outParams = szo;
+    auth->where = "UUID=?";
+    dbRequests->addfirst(dbRequests, &auth, sizeof(dbRequest *));
+  }
+
+  Rd->fromDb = FALSE;
+
+//  uuid = Rd->shs.UUID;        first = getStrH(Rd->stuff, "firstName");        last = getStrH(Rd->stuff, "lastName");
+
+  // Special for showing another users details.
+  if ('\0' != getStrH(Rd->queries, "user")[0])
+    uuid = "";
+
+  char *first = xstrdup(""), *last = xstrdup("");
+
+  if (NULL != firstName)
+  {
+    free(first);
+    first = xstrdup(firstName);
+    if (NULL == lastName)
+    {
+      char *t = strchr(first, ' ');
+
+d("accountRead() single name |%s|  |%s|", first, last);
+      if (NULL == t)
+        t = strchr(first, '+');
+      if (NULL != t)
+      {
+        *t++ = '\0';
+        free(last);
+        last = xstrdup(t);
+      }
+    }
+    else
+    {
+      free(last);
+      last = xstrdup(lastName);
+    }
+  }
+d("accountRead() UUID %s, name %s %s", uuid, first, last);
+  uuid_clear(binuuid);
+  if ((NULL != uuid) && ('\0' != uuid[0]))
+    uuid_parse(uuid, binuuid);
+  if ((NULL != uuid) && ('\0' != uuid[0]) && (!uuid_is_null(binuuid)))
+  {
+    char *where = xmprintf("%s/users/%s.lua", scData, uuid);
+    rt = LuaToHash(Rd, where, "user", tnm, ret, &st, &now, "user");
+
+    free(where);
+    dbDoSomething(uuids, FALSE, uuid);
+    rows = uuids->rows;
+  }
+  else
+  {
+
+    if ('\0' != first[0])
+    {
+      char *where = xmprintf("%s/users/%s_%s.lua", scData, first, last);
+      rt = LuaToHash(Rd, where, "user", tnm, ret, &st, &now, "user");
+
+      free(where);
+      dbDoSomething(acnts, FALSE, first, last);                         // LEAKY
+      rows = acnts->rows;
+    }
+  }
+//  else
+//  {
+//    bitch(Rd, "Unable to read user record.", "Nothing available to look up a user record with.");
+//    rt = 1;
+//  }
+
+  if (0 == rt)
+  {
+T("Found Lua record.");
+    ret += 1;
+    Rd->database->putstr(Rd->database, "UserAccounts.FirstName",        first);
+    Rd->database->putstr(Rd->database, "UserAccounts.LastName",         last);
+    Rd->database->putstr(Rd->database, "UserAccounts.Email",            getStrH(tnm, "email"));
+    Rd->database->putstr(Rd->database, "UserAccounts.Created",          getStrH(tnm, "created"));
+    Rd->database->putstr(Rd->database, "UserAccounts.PrincipalID",      getStrH(tnm, "UUID"));
+    Rd->database->putstr(Rd->database, "UserAccounts.UserLevel",        getStrH(tnm, "level"));
+    Rd->database->putstr(Rd->database, "UserAccounts.UserFlags",        getStrH(tnm, "flags"));
+    Rd->database->putstr(Rd->database, "UserAccounts.UserTitle",        getStrH(tnm, "title"));
+    Rd->database->putstr(Rd->database, "UserAccounts.active",           getStrH(tnm, "active"));
+    Rd->database->putstr(Rd->database, "auth.passwordSalt",             getStrH(tnm, "passwordSalt"));
+    Rd->database->putstr(Rd->database, "auth.passwordHash",             getStrH(tnm, "passwordHash"));
+    Rd->stuff->   putstr(Rd->stuff,    "linky-hashish",                 getStrH(tnm, "linky-hashish"));
+    Rd->database->putstr(Rd->database, "Lua.name",                      getStrH(tnm, "name"));
+    Rd->database->putstr(Rd->database, "Lua.DoB",                       getStrH(tnm, "DoB"));
+    Rd->database->putstr(Rd->database, "Lua.agree",                     getStrH(tnm, "agree"));
+    Rd->database->putstr(Rd->database, "Lua.adult",                     getStrH(tnm, "adult"));
+    Rd->database->putstr(Rd->database, "Lua.aboutMe",                   getStrH(tnm, "aboutMe"));
+    Rd->database->putstr(Rd->database, "Lua.vouched",                   getStrH(tnm, "vouched"));
+    Rd->database->putstr(Rd->database, "Lua.voucher",                   getStrH(tnm, "voucher"));
+  }
+//  else if (rows)
+  if (rows)
+  {
+    rt = rows->rows->size(rows->rows);
+    if (1 == rt)
+    {
+      ret = rt;
+T("Found database record.");
+      dbPull(Rd, "UserAccounts", rows);
+
+      char *name = xmprintf("%s %s", getStrH(Rd->database, "UserAccounts.FirstName"), getStrH(Rd->database, "UserAccounts.LastName"));
+
+      Rd->fromDb = TRUE;
+      Rd->database->putstr(Rd->database, "Lua.name", name);
+      free(name);
+      dbDoSomething(auth, FALSE, getStrH(Rd->database, "UserAccounts.PrincipalID"));            // LEAKY
+      rows = auth->rows;
+      if (rows)
+      {
+        if (1 == rows->rows->size(rows->rows))
+          dbPull(Rd, "auth", rows);
+        else
+        {
+          free(rows->fieldNames);
+          rows->rows->free(rows->rows);
+          free(rows);
+        }
+      }
+      else
+      {
+        free(rows->fieldNames);
+        rows->rows->free(rows->rows);
+        free(rows);
+      }
+    }
+    else
+    {
+      free(rows->fieldNames);
+      rows->rows->free(rows->rows);
+      free(rows);
+    }
+  }
+  else
+  {
+    d("No user name or UUID to get an account for.");
+  }
+
+  if (1 == ret)
+  {
+// TODO - this has to change when we are editing other peoples accounts.
+    if ('\0' == getStrH(Rd->queries, "user")[0])
+    {
+//      Rd->shs.level = atoi(getStrH(Rd->database, "UserAccounts.UserLevel"));
+// TODO - might have to combine first and last here.
+//      Rd->shs.name = Rd->database->getstr(Rd->database, "Lua.name", true);
+//      Rd->shs.UUID = Rd->database->getstr(Rd->database, "UserAccounts.PrincipalID", true);
+//d("accountRead() setting session uuid %s level %d name %s ", Rd->shs.UUID, (int) Rd->shs.level, Rd->shs.name);
+    }
+//    Rd->stuff->putstr(Rd->stuff, "email", getStrH(Rd->database, "UserAccounts.Email"));
+  }
+
+  free(last);
+  free(first);
+  tnm->free(tnm);
+  return ret;
+}
+
+static int accountDelSub(reqData *Rd, inputForm *iF, inputValue *iV)
+{
+  int ret = 0;
+  char *uuid = Rd->shs.UUID,    *first = getStrH(Rd->stuff, "firstName"),       *last = getStrH(Rd->stuff, "lastName");
+  int c = accountRead(Rd, uuid, first, last);
+
+  if (1 != c)
+  {
+    bitch(Rd, "Cannot delete account.", "Account doesn't exist.");
+    ret++;
+  }
+  else
+  {
+//      check if logged in user is allowed to delete this account
+//      delete user record
+//      log the user out if they are logged in
+  }
+  return ret;
+}
+
+// The [create member] button on accountLoginWeb()
+static int accountCreateSub(reqData *Rd, inputForm *iF, inputValue *iV)
+{
+  int ret = 0;
+  char *uuid = Rd->shs.UUID,    *first = getStrH(Rd->stuff, "name"), *last = NULL;
+  int c = accountRead(Rd, uuid, first, last);
+
+  if (strcmp("POST", Rd->Method) == 0)
+  {
+    if (0 != c)
+    {
+      bitch(Rd, "Cannot create account.", "Account exists.");
+      Rd->shs.status = SHS_NUKE;
+      ret++;
+    }
+    else
+    {
+      char *salt = newSLOSsalt(Rd);
+      char *h = checkSLOSpassword(Rd, salt, getStrH(Rd->body, "password"), NULL, NULL);
+
+      if (NULL == h)
+        ret++;
+      else
+      {
+        Rd->stuff->putstr(Rd->stuff, "passHash", h);
+        Rd->stuff->putstr(Rd->stuff, "passSalt", salt);
+        if (NULL != Rd->shs.name)       free(Rd->shs.name);
+        // So that we can get the name later when we show the account data entry page via GET.
+        Rd->shs.name = Rd->stuff->getstr(Rd->stuff, "name", true);
+        free(h);
+        Rd->shs.status = SHS_REFRESH;
+      }
+      free(salt);
+      if (0 != ret)
+        Rd->shs.status = SHS_NUKE;
+    }
+  }
+  return ret;
+}
+
+// The [confirm] button on accountAddWeb()
+static int accountAddSub(reqData *Rd, inputForm *iF, inputValue *iV)
+{
+  int ret = 0;
+  char *uuid = Rd->shs.UUID,    *first = getStrH(Rd->stuff, "firstName"),       *last = getStrH(Rd->stuff, "lastName");
+  int c = accountRead(Rd, uuid, first, last);
+
+  if (0 != c)
+  {
+    bitch(Rd, "Cannot add account.", "Account exists.");
+    Rd->shs.status = SHS_NUKE;
+    ret++;
+  }
+  else if ((0 == ret) && (strcmp("POST", Rd->Method) == 0))
+  {
+    char *h = checkSLOSpassword(Rd, getStrH(Rd->stuff, "passSalt"), getStrH(Rd->stuff, "password"), getStrH(Rd->stuff, "passHash"), "Passwords are not the same.");
+
+    if (NULL == h)
+    {
+      ret++;
+      Rd->shs.status = SHS_NUKE;
+    }
+    else
+    {
+      free(h);
+      generateAccountUUID(Rd);
+      Rd->stuff->putstr(Rd->stuff, "passwordHash", getStrH(Rd->stuff, "passHash"));
+      Rd->stuff->putstr(Rd->stuff, "passwordSalt", getStrH(Rd->stuff, "passSalt"));
+      Rd->shs.level = -200;
+      Rd->database->putstr(Rd->database, "UserAccounts.UserLevel", "-200");
+      // Generate the linky for the email.
+      newSesh(Rd, TRUE);
+      accountWrite(Rd);
+      // log them in
+      I("Logged on %s  %s  Level %d %s", Rd->shs.UUID, Rd->shs.name, Rd->shs.level, getLevel(Rd->shs.level));
+      Rd->output = "accountView";
+      Rd->form = "accountView";
+      Rd->doit = "login";
+      Rd->shs.status = SHS_LOGIN;
+    }
+  }
+  return ret;
+}
+
+static int accountSaveSub(reqData *Rd, inputForm *iF, inputValue *iV)
+{
+  int ret = 0;
+  // Using body[user] here, coz we got to this page via a URL query.
+  char *uuid = Rd->shs.UUID,    *first = getStrH(Rd->body, "user"),     *last = NULL;
+  int c = accountRead(Rd, NULL, first, last);
+
+  if (1 != c)
+  {
+    bitch(Rd, "Cannot save account.", "Account doesn't exist.");
+    ret++;
+  }
+  else if ((0 == ret) && (strcmp("POST", Rd->Method) == 0))
+  {
+    Rd->stuff->putstr(Rd->stuff,    "email",            getStrH(Rd->database, "UserAccounts.Email"));
+    Rd->stuff->putstr(Rd->stuff,    "created",          getStrH(Rd->database, "UserAccounts.Created"));
+    Rd->stuff->putstr(Rd->stuff,    "flags",            getStrH(Rd->database, "UserAccounts.UserFlags"));
+    Rd->stuff->putstr(Rd->stuff,    "active",           getStrH(Rd->database, "UserAccounts.active"));
+    Rd->stuff->putstr(Rd->stuff,    "passwordSalt",     getStrH(Rd->database, "auth.passwordSalt"));
+    Rd->stuff->putstr(Rd->stuff,    "passwordHash",     getStrH(Rd->database, "auth.passwordHash"));
+    Rd->stuff->putstr(Rd->stuff,    "name",             getStrH(Rd->database, "Lua.name"));
+    Rd->stuff->putstr(Rd->stuff,    "DoB",              getStrH(Rd->database, "Lua.DoB"));
+    Rd->stuff->putstr(Rd->stuff,    "agree",            getStrH(Rd->database, "Lua.agree"));
+    Rd->stuff->putstr(Rd->stuff,    "adult",            getStrH(Rd->database, "Lua.adult"));
+    Rd->stuff->putstr(Rd->stuff,    "aboutMe",          getStrH(Rd->database, "Lua.aboutMe"));
+    Rd->stuff->putstr(Rd->stuff,    "vouched",          getStrH(Rd->database, "Lua.vouched"));
+    Rd->stuff->putstr(Rd->stuff,    "voucher",          getStrH(Rd->database, "Lua.voucher"));
+
+    char *lvl = getStrH(Rd->body, "level");
+    qlisttbl_obj_t obj;
+
+    memset((void*)&obj, 0, sizeof(obj)); // must be cleared before call
+    accountLevels->lock(accountLevels);
+    while(accountLevels->getnext(accountLevels, &obj, NULL, false) == true)
+    {
+      if (strcmp(lvl, (char *) obj.data) == 0)
+        Rd->database->putstr(Rd->database, "UserAccounts.UserLevel", obj.name);
+    }
+    accountLevels->unlock(accountLevels);
+    accountWrite(Rd);
+    free(Rd->outQuery);
+    Rd->outQuery = xmprintf("?user=%s+%s", getStrH(Rd->database, "UserAccounts.FirstName"), getStrH(Rd->database, "UserAccounts.LastName"));
+// TODO - this isn't being shown.
+    addStrL(Rd->messages, "Account saved.");
+  }
+  return ret;
+}
+
+// The unique validation URL sent in email.
+static int accountValidateSub(reqData *Rd, inputForm *iF, inputValue *iV)
+{
+  int ret = 0;
+  char *uuid = Rd->shs.UUID,    *first = getStrH(Rd->stuff, "firstName"),       *last = getStrH(Rd->stuff, "lastName");
+  int c = accountRead(Rd, uuid, first, last);
+
+  if (1 != c)
+  {
+    bitch(Rd, "Cannot validate account.", "Account doesn't exist.");
+    ret++;
+  }
+  else
+  {
+    Rd->stuff->putstr(Rd->stuff,    "email",            getStrH(Rd->database, "UserAccounts.Email"));
+    Rd->stuff->putstr(Rd->stuff,    "created",          getStrH(Rd->database, "UserAccounts.Created"));
+    Rd->stuff->putstr(Rd->stuff,    "flags",            getStrH(Rd->database, "UserAccounts.UserFlags"));
+    Rd->stuff->putstr(Rd->stuff,    "active",           getStrH(Rd->database, "UserAccounts.active"));
+    Rd->stuff->putstr(Rd->stuff,    "passwordSalt",     getStrH(Rd->database, "auth.passwordSalt"));
+    Rd->stuff->putstr(Rd->stuff,    "passwordHash",     getStrH(Rd->database, "auth.passwordHash"));
+    Rd->stuff->putstr(Rd->stuff,    "name",             getStrH(Rd->database, "Lua.name"));
+    Rd->stuff->putstr(Rd->stuff,    "DoB",              getStrH(Rd->database, "Lua.DoB"));
+    Rd->stuff->putstr(Rd->stuff,    "agree",            getStrH(Rd->database, "Lua.agree"));
+    Rd->stuff->putstr(Rd->stuff,    "adult",            getStrH(Rd->database, "Lua.adult"));
+    Rd->stuff->putstr(Rd->stuff,    "aboutMe",          getStrH(Rd->database, "Lua.aboutMe"));
+    Rd->stuff->putstr(Rd->stuff,    "vouched",          getStrH(Rd->database, "Lua.vouched"));
+    Rd->stuff->putstr(Rd->stuff,    "voucher",          getStrH(Rd->database, "Lua.voucher"));
+    Rd->shs.level = -100;
+    Rd->database->putstr(Rd->database, "UserAccounts.UserLevel", "-100");
+    accountWrite(Rd);
+    Rd->doit = "logout";
+    Rd->output = "accountLogin";
+    Rd->form = "accountLogin";
+    Rd->shs.status = SHS_NUKE;
+  }
+  return ret;
+}
+
+static int accountViewSub(reqData *Rd, inputForm *iF, inputValue *iV)
+{
+// TODO - this has to change when we are editing other peoples accounts.
+  int ret = 0;
+  char *uuid = Rd->shs.UUID,    *first = getStrH(Rd->stuff, "firstName"),       *last = getStrH(Rd->stuff, "lastName");
+  int c = accountRead(Rd, uuid, first, last);
+
+d("Sub accountViewSub() %s  %s %s", uuid, first, last);
+  if (1 != c)
+  {
+    bitch(Rd, "Cannot view account.", "Account doesn't exist.");
+    ret++;
+    Rd->shs.status = SHS_NUKE;
+  }
+  else
+  {
+    // Check password on POST if the session user is the same as the shown user, coz this is the page shown on login.
+    // Also only check on login.
+    if ((strcmp("POST", Rd->Method) == 0) //&& (strcmp(Rd->shs.UUID, getStrH(Rd->database, "UserAccounts.PrincipalID")) == 0)
+      && (strcmp("login", Rd->doit) == 0) && (strcmp("accountLogin", Rd->form) == 0))
+    {
+      char *h = checkSLOSpassword(Rd, getStrH(Rd->database, "auth.passwordSalt"), getStrH(Rd->body, "password"), getStrH(Rd->database, "auth.passwordHash"), "Login failed.");
+      if (NULL == h)
+      {
+        ret++;
+        Rd->shs.status = SHS_NUKE;
+      }
+      else
+      {
+        Rd->shs.level = atoi(getStrH(Rd->database, "UserAccounts.UserLevel"));
+        if (NULL != Rd->shs.name)       free(Rd->shs.name);
+        Rd->shs.name = Rd->database->getstr(Rd->database, "Lua.name", true);
+        if (NULL != Rd->shs.UUID)       free(Rd->shs.UUID);
+        Rd->shs.UUID = Rd->database->getstr(Rd->database, "UserAccounts.PrincipalID", true);
+        free(h);
+        I("Logged on %s  %s  Level %d %s", Rd->shs.UUID, Rd->shs.name, Rd->shs.level, getLevel(Rd->shs.level));
+        Rd->shs.status = SHS_LOGIN;
+      }
+    }
+  }
+
+  return ret;
+}
+static int accountEditSub(reqData *Rd, inputForm *iF, inputValue *iV)
+{
+  int ret = 0;
+  char *uuid = Rd->shs.UUID,    *first = getStrH(Rd->stuff, "firstName"),       *last = getStrH(Rd->stuff, "lastName");
+  int c = accountRead(Rd, uuid, first, last);
+
+d("Sub accountEditSub %s  %s %s", uuid, first, last);
+  if (1 != c)
+  {
+    bitch(Rd, "Cannot edit account.", "Account doesn't exist.");
+    ret++;
+  }
+  else
+  {
+//      check if logged in user is allowed to make these changes
+//      update user record
+  }
+  return ret;
+}
+
+static int accountExploreSub(reqData *Rd, inputForm *iF, inputValue *iV)
+{
+  int ret = 0;
+//      get a list of user records
+  return ret;
+}
+
+static int accountOutSub(reqData *Rd, inputForm *iF, inputValue *iV)
+{
+  int ret = 0;
+  char *uuid = Rd->shs.UUID,    *first = getStrH(Rd->stuff, "firstName"),       *last = getStrH(Rd->stuff, "lastName");
+  int c = accountRead(Rd, uuid, first, last);
+
+  if (1 != c)
+  {
+//    bitch(Rd, "Cannot logout account.", "Account doesn't exist.");
+//    ret++;
+  }
+
+  Rd->shs.status = SHS_NUKE;
+  return ret;
+}
+
+/* TODO - instead of searching through all the users, ...
+  have a bunch of separate folders with symlinks
+  scData/users/aaproved
+  scData/users/disabled
+  scData/users/god
+    onefang_rejected.lua        -> ../uuid.lua
+  scData/users/newbie
+    foo_bar.lua                 -> ../uuid.lua
+  scData/users/validated
+
+*/
+typedef struct _RdAndListTbl RdAndListTbl;
+struct _RdAndListTbl
+{
+  reqData *Rd;
+  qlisttbl_t *list;
+};
+static int accountFilterValidated(struct dirtree *node)
+{
+    if (!node->parent) return DIRTREE_RECURSE | DIRTREE_SHUTUP;
+
+    if (S_ISREG(node->st.st_mode))
+    {
+      struct stat st;
+      struct timespec now;
+      RdAndListTbl *rdl = (RdAndListTbl *) node->parent->extra;
+      qhashtbl_t *tnm = qhashtbl(0, 0);
+      char *name = node->name;
+      char *where = xmprintf("%s/users/%s", scData, node->name);
+      int rt = LuaToHash(rdl->Rd, where, "user", tnm, 0, &st, &now, "user");
+
+t("accountFilterValidatedVoucher %s (%s) -> %s -> %s", name, getStrH(tnm, "level"), getStrH(tnm, "name"), getStrH(tnm, "voucher"));
+      if ((0 == rt) && (strcmp("-100", getStrH(tnm, "level")) == 0))
+        rdl->list->put(rdl->list, getStrH(tnm, "name"), &tnm, sizeof(qhashtbl_t *));
+      else
+        tnm->free(tnm);
+      free(where);
+    }
+    return 0;
+}
+qlisttbl_t *getAccounts(reqData *Rd)
+{
+  qlisttbl_t *ret = qlisttbl(0);
+  RdAndListTbl rdl = {Rd, ret};
+  char *path = xmprintf("%s/users", scData);
+  struct dirtree *new = dirtree_add_node(0, path, 0);
+
+  new->extra = (long) &rdl;
+  dirtree_handle_callback(new, accountFilterValidated);
+  ret->sort(ret);
+  free(path);
+
+  return ret;
+}
+static void accountExploreValidatedVouchersWeb(reqData *Rd, inputForm *oF, inputValue *oV)
+{
+  qlisttbl_t *list =getAccounts(Rd);
+
+  if (NULL != Rd->shs.name)     free(Rd->shs.name);
+  Rd->shs.name = NULL;
+  if (NULL != Rd->shs.UUID)     free(Rd->shs.UUID);
+  Rd->shs.UUID = NULL;
+  Rd->shs.level = -256;
+  accountWebHeaders(Rd, oF);
+    accountWebFields(Rd, oF, oV);
+
+  count = list->size(list);
+  Rd->reply->addstrf(Rd->reply, "<table border=\"1\"><caption>Validated users</caption>\n");
+  Rd->reply->addstr(Rd->reply, "<tr>"); 
+  Rd->reply->addstr(Rd->reply, "<th>name</th>");
+  Rd->reply->addstr(Rd->reply, "<th>voucher</th>");
+  Rd->reply->addstr(Rd->reply, "<th>level</th>");
+  Rd->reply->addstr(Rd->reply, "<th>title</th>");
+  Rd->reply->addstr(Rd->reply, "</tr>\n<tr>");
+
+  qlisttbl_obj_t obj;
+  memset((void *) &obj, 0, sizeof(obj));
+  list->lock(list);
+  while(list->getnext(list, &obj, NULL, false) == true)
+  {
+    qhashtbl_t *tnm = *((qhashtbl_t **) obj.data);
+    char *nm = qstrreplace("tr", xstrdup(obj.name), " ",  "+");
+
+    Rd->reply->addstrf(Rd->reply, "<tr><td><a href='https://%s%s%s?user=%s'>%s</a></td>", Rd->Host, Rd->Script, Rd->Path, nm, obj.name);
+    Rd->reply->addstrf(Rd->reply, "<td>%s</td><td>%s</td><td>%s</td></tr>", getStrH(tnm, "voucher"), getStrH(tnm, "level"), getStrH(tnm, "title"));
+    free(nm);
+    tnm->clear(tnm);
+    list->removeobj(list, &obj);
+    tnm->free(tnm);
+  }
+  list->unlock(list);
+  Rd->reply->addstr(Rd->reply, "</table>");
+  list->free(list);
+
+    accountWebSubs(Rd, oF);
+  accountWebFooter(Rd, oF);
+}
+static int accountExploreValidatedVoucherSub(reqData *Rd, inputForm *iF, inputValue *iV)
+{
+  int ret = 0;
+  return ret;
+}
+
+
+qhashtbl_t *accountPages = NULL;
+inputForm *newInputForm(char *name, char *title, char *help, inputFormShowFunc web, inputFormShowFunc eWeb)
+{
+  inputForm *ret = xmalloc(sizeof(inputForm));
+
+d("newInputForm(%s)", name);
+  ret->name = name;     ret->title = title;     ret->help = help;
+  ret->web = web;       ret->eWeb = eWeb;
+  ret->fields = qlisttbl(QLISTTBL_THREADSAFE | QLISTTBL_UNIQUE | QLISTTBL_LOOKUPFORWARD);
+  ret->subs = qhashtbl(0, 0);
+  accountPages->put(accountPages, ret->name, ret, sizeof(inputForm));
+  free(ret);
+  return accountPages->get(accountPages, name, NULL, false);
+}
+
+inputField *addInputField(inputForm *iF, signed char type, char *name, char *title, char *help, inputFieldValidFunc validate, inputFieldShowFunc web)
+{
+  inputField *ret = xzalloc(sizeof(inputField));
+
+//d("addInputField(%s, %s)", iF->name, name);
+  ret->name = name;             ret->title = title;     ret->help = help;
+  ret->validate = validate;     ret->web = web;         ret->type = type;
+  ret->flags = FLD_EDITABLE;
+  iF->fields->put(iF->fields, ret->name, ret, sizeof(inputField));
+  free(ret);
+  return iF->fields->get(iF->fields, name, NULL, false);
+}
+
+void inputFieldExtra(inputField *ret, signed char flags, short viewLength, short maxLength)
+{
+  ret->flags = flags;
+  ret->viewLength = viewLength; ret->maxLength = maxLength;
+}
+
+void addSession(inputForm *iF)
+{
+  inputField *fld, **flds = xzalloc(3 * sizeof(*flds));
+
+//d("addSession(%s)", iF->name);
+  flds[0] = addInputField(iF, LUA_TSTRING,   "hashish",        "hashish",        "", sessionValidate, sessionWeb);
+  inputFieldExtra(flds[0], FLD_HIDDEN, 0, 0);
+  flds[1] = addInputField(iF, LUA_TSTRING,   "toke_n_munchie", "toke_n_munchie", "", sessionValidate, sessionWeb);
+  inputFieldExtra(flds[1], FLD_HIDDEN, 0, 0);
+  fld     = addInputField(iF, LUA_TGROUP, "sessionGroup",   "sessionGroup",   "", sessionValidate, sessionWeb);
+  inputFieldExtra(fld, FLD_HIDDEN, 0, 0);
+  fld->group = flds;
+  flds[0]->group = flds;
+  flds[1]->group = flds;
+}
+
+void addEmailFields(inputForm *iF)
+{
+  inputField *fld, **flds = xzalloc(3 * sizeof(*flds));
+
+  flds[0] = addInputField(iF, LUA_TEMAIL, "email", "email", NULL, emailValidate, emailWeb);
+  inputFieldExtra(flds[0], FLD_EDITABLE, 42, 254);
+  flds[1] = addInputField(iF, LUA_TEMAIL, "emayl", "Re-enter your email, to be sure you got it correct", 
+                        "A validation email will be sent to this email address, you will need to click on the link in it to continue your account creation.", emailValidate, emailWeb);
+  inputFieldExtra(flds[1], FLD_EDITABLE, 42, 254);
+  fld     = addInputField(iF, LUA_TGROUP, "emailGroup",   "emailGroup",   "", emailValidate, NULL);
+  inputFieldExtra(fld, FLD_HIDDEN, 0, 0);
+  fld->group = flds;
+  flds[0]->group = flds;
+  flds[1]->group = flds;
+}
+
+void addDoBFields(inputForm *iF)
+{
+  inputField *fld, **flds = xzalloc(3 * sizeof(*flds));
+
+  flds[0] = addInputField(iF, LUA_TSTRING, "DoByear", "year", NULL, DoBValidate, DoByWeb);
+  flds[1] = addInputField(iF, LUA_TSTRING, "DoBmonth", "month", NULL, DoBValidate, DoBmWeb);
+  fld     = addInputField(iF, LUA_TGROUP, "DoBGroup",   "DoBGroup",   "", DoBValidate, DoBWeb);
+  inputFieldExtra(fld, FLD_HIDDEN, 0, 0);
+  fld->group = flds;
+  flds[0]->group = flds;
+  flds[1]->group = flds;
+}
+
+void addLegalFields(inputForm *iF)
+{
+  inputField *fld, **flds = xzalloc(3 * sizeof(*flds));
+
+  flds[0] = addInputField(iF, LUA_TBOOLEAN, "adult", "I'm allegedly an adult in my country.", NULL, legalValidate, adultWeb);
+  flds[1] = addInputField(iF, LUA_TBOOLEAN, "agree", "I accept the Terms of Service.", NULL, legalValidate, agreeWeb);
+  fld     = addInputField(iF, LUA_TGROUP, "legalGroup",   "legalGroup",   "", legalValidate, legalWeb);
+  inputFieldExtra(fld, FLD_HIDDEN, 0, 0);
+  fld->group = flds;
+  flds[0]->group = flds;
+  flds[1]->group = flds;
+}
+
+inputSub *addSubmit(inputForm *iF, char *name, char *title, char *help, inputSubmitFunc submit, char *output)
+{
+  inputSub *ret = xmalloc(sizeof(inputSub));
+
+//d("addSubmit(%s, %s)", iF->name, name);
+  ret->name = name;     ret->title = title;     ret->help = help;       ret->submit = submit;   ret->outputForm = output;
+  iF->subs->put(iF->subs, ret->name, ret, sizeof(inputSub));
+  free(ret);
+  return iF->subs->get(iF->subs, name, NULL, false);
+}
+
+
+/* There should be some precedence for values overriding values here.
+    https://www.w3.org/standards/webarch/protocols
+        "This intro text is boilerplate for the beta release of w3.org."  Fucking useless.  Pffft
+    https://www.w3.org/Protocols/
+        Still nothing official, though the ENV / HEADER stuff tends to be about the protocol things, and cookies / body / queries are about the data things.
+    http://docs.gantry.org/gantry4/advanced/setby
+        Says that query overrides cookies, but that might be just for their platform.
+    https://framework.zend.com/manual/1.11/en/zend.controller.request.html
+        Says - "1. GET, 2. POST, 3. COOKIE, 4. SERVER, 5. ENV."
+            We don't actually get the headers directly, it's all sent via the env.
+
+URL query       Values actually provided by the user in the FORM, and other things.
+POST body       Values actually provided by the user in the FORM.
+cookies         
+    https://stackoverflow.com/questions/4056306/how-to-handle-multiple-cookies-with-the-same-name
+
+headers         includes HTTP_COOKIE and QUERY_STRING
+env             includes headers and HTTP_COOKIE and QUERY_STRING
+
+database        Since all of the above are for updating the database anyway, this goes on the bottom, overridden by all.
+                    Though be wary of security stuff.
+
+    Sending cookie headers is a special case, multiples can be sent, otherwise headers are singletons, only send one for each name.
+*/
+char *sourceTypes[] =
+{
+  "cookies",
+  "body",
+  "queries",
+  "stuff"
+};
+
+static int collectFields(reqData *Rd, inputForm *iF, inputValue *iV, int t)
+{
+  int i = 0, j;
+  qlisttbl_obj_t obj;
+
+  memset((void*)&obj, 0, sizeof(obj)); // must be cleared before call
+  iF->fields->lock(iF->fields);
+  while(iF->fields->getnext(iF->fields, &obj, NULL, false) == true)
+  {
+    inputField *fld = (inputField *) obj.data;
+
+//if (0 > t)
+//  d("Collecting %d  %s - %s", t, iF->name, fld->name);
+//else
+//  d("Collecting %s  %s - %s", sourceTypes[t], iF->name, fld->name);
+    iV[i].field = fld;
+    if (LUA_TGROUP == fld->type)
+    {
+      if (0 >= t)
+      {
+        j = 0;
+        // If it's a group, number the members relative to the group field.
+        // Assume the members for this group are the previous ones.
+        while (iV[i].field->group[j])
+        {
+          j++;
+          iV[i - j].index = j;
+        }
+      }
+    }
+    else
+    {
+      char *vl = NULL;
+
+      switch (t)
+      {
+        // We don't get the cookies metadata.
+        case 0 : vl = Rd->cookies->getstr(Rd->cookies,  obj.name, false);       break;
+        case 1 : vl = Rd->body->   getstr(Rd->body,     obj.name, false);       break;
+        case 2 : vl = Rd->queries->getstr(Rd->queries,  obj.name, false);       break;
+        case 3 : vl = Rd->queries->getstr(Rd->stuff,    obj.name, false);       break;
+        default:                                                                break;
+      }
+      if ((NULL != iV[i].value) && (NULL != vl))
+      {
+        if (strcmp(vl, iV[i].value) != 0)
+          W("Collected %s value for %s - %s from %s overriding value from %s", sourceTypes[t], iF->name, fld->name, sourceTypes[t], sourceTypes[iV[i].source]);
+        else
+          W("Collected %s value for %s - %s from %s same as value from %s", sourceTypes[t], iF->name, fld->name, sourceTypes[t], sourceTypes[iV[i].source]);
+      }
+      if (NULL != vl)
+      {
+        iV[i].source = t;
+        iV[i].value = vl;
+        D("Collected %s value for %s - %s = %s", sourceTypes[t], iF->name, fld->name, vl);
+      }
+    }
+    i++;
+  }
+  iF->fields->unlock(iF->fields);
+  return i;
+}
+
+
+void sessionStateEngine(reqData *Rd, char *type)
+{
+  switch (Rd->shs.status)
+  {
+    case SHS_UNKNOWN:   d("sessionStateEngine(SHS_UNKNOWN,  %s)",       type);  break;
+    case SHS_NONE:      d("sessionStateEngine(SHS_NONE,    %s)",        type);  break;
+    case SHS_BOGUS:     d("sessionStateEngine(SHS_BOGUS,    %s)",       type);  break;
+    case SHS_PROBLEM:   d("sessionStateEngine(SHS_PROBLEM,  %s)",       type);  break;
+    case SHS_VALID:     d("sessionStateEngine(SHS_VALID,    %s)",       type);  break;
+
+    case SHS_LOGIN:     d("sessionStateEngine(SHS_LOGIN,    %s)",       type);  break;
+
+    case SHS_RENEW:     d("sessionStateEngine(SHS_RENEW,    %s)",       type);  break;
+    case SHS_REFRESH:   d("sessionStateEngine(SHS_REFRESH,  %s)",       type);  break;
+    case SHS_IDLE:      d("sessionStateEngine(SHS_IDLE,     %s)",       type);  break;
+    case SHS_ANCIENT:   d("sessionStateEngine(SHS_ANCIENT,  %s)",       type);  break;
+
+    case SHS_SECURITY:  d("sessionStateEngine(SHS_SECURITY, %s)",       type);  break;
+    case SHS_RELOGIN:   d("sessionStateEngine(SHS_RELOGIN,  %s)",       type);  break;
+
+    case SHS_KEEP:      d("sessionStateEngine(SHS_KEEP,     %s)",       type);  break;
+    case SHS_WIPE:      d("sessionStateEngine(SHS_WIPE,     %s)",       type);  break;
+    case SHS_NUKE:      d("sessionStateEngine(SHS_NUKE,     %s)",       type);  break;
+  }
+}
+
+
+void account_html(char *file, reqData *Rd, HTMLfile *thisFile)
+{
+  inputForm *iF;
+  inputField *fld;
+  inputSub *sub;
+  boolean isGET = FALSE;
+  int e = 0, t = 0, i, j;
+  char *doit = getStrH(Rd->body, "doit"), *form = getStrH(Rd->body, "form");
+
+  if (NULL == accountLevels)
+  {
+    accountLevels = qlisttbl(QLISTTBL_LOOKUPFORWARD | QLISTTBL_THREADSAFE | QLISTTBL_UNIQUE);
+    accountLevels->putstr(accountLevels, "-256", "disabled");
+    accountLevels->putstr(accountLevels, "-200", "newbie");
+    accountLevels->putstr(accountLevels, "-100", "validated");
+    accountLevels->putstr(accountLevels, "-50",  "vouched for");
+    accountLevels->putstr(accountLevels, "0",    "approved");   // Note that http://opensimulator.org/wiki/Userlevel claims that 1 and above are "GOD_LIKE".
+    accountLevels->putstr(accountLevels, "200",  "god");
+  }
+
+  // Check "Origin" header and /or HTTP_REFERER header.
+  //    "Origin" is either HTTP_HOST or X-FORWARDED-HOST.  Which could be "null".
+  char *ref = xmprintf("https://%s%s/account.html", getStrH(Rd->headers, "SERVER_NAME"), getStrH(Rd->headers, "SCRIPT_NAME"));
+  char *href = Rd->headers->getstr(Rd->headers, "HTTP_REFERER", true);
+
+  if (NULL != href)
+  {
+    char *f = strchr(href, '?');
+
+    if (NULL != f)
+      *f = '\0';
+    if (('\0' != href[0]) && (strcmp(ref, href) != 0))
+    {
+      bitch(Rd, "Invalid referer.", ref);
+      D("Invalid referer - %s  isn't  %s", ref, href);
+      form = "accountLogin";
+      Rd->shs.status = SHS_PROBLEM;
+    }
+    free(href);
+  }
+  free(ref);
+  ref = getStrH(Rd->headers, "SERVER_NAME");
+  href = getStrH(Rd->headers, "HTTP_HOST");
+  if ('\0' == href[0])
+    href = getStrH(Rd->headers, "X-FORWARDED-HOST");
+  if (('\0' != href[0]) && (strcmp(ref, href) != 0))
+  {
+    bitch(Rd, "Invalid HOST.", ref);
+    D("Invalid HOST - %s  isn't  %s", ref, href);
+    form = "accountLogin";
+    Rd->shs.status = SHS_PROBLEM;
+  }
+
+  // Redirect to HTTPS if it's HTTP.
+  if (strcmp("https", Rd->Scheme) != 0)
+  {
+    Rd->Rheaders->putstr (Rd->Rheaders, "Status", "301 Moved Permanently");
+    Rd->Rheaders->putstrf(Rd->Rheaders, "Location", "https://%s%s", Rd->Host, Rd->RUri);
+    Rd->reply->addstrf(Rd->reply, "<html><title>404 Unknown page</title><head>"
+                                  "<meta http-equiv='refresh' content='0; URL=https://%s%s' />"
+                                  "</head><body>You should get redirected to <a href='https://%s%s'>https://%s%s</a></body></html>",
+                                  Rd->Host, Rd->RUri, Rd->Host, Rd->RUri, Rd->Host, Rd->RUri
+                        );
+    D("Redirecting dynamic page %s  ->  https://%s%s", file, Rd->Host, Rd->RUri);
+    return;
+  }
+
+  // Create the dynamic web pages for account.html.
+  if (NULL == accountPages)
+  {
+    accountPages = qhashtbl(0, 0);
+
+
+    iF = newInputForm("accountAdd", "", NULL, accountAddWeb, accountLoginWeb);
+    addSession(iF);
+//    fld = addInputField(iF, LUA_TSTRING, "UUID", "UUID", NULL, UUIDValidate, UUIDWeb);
+//    inputFieldExtra(fld, FLD_HIDDEN, 0, 0);
+    fld = addInputField(iF, LUA_TSTRING, "name", "name", NULL, nameValidate, nameWeb);
+    inputFieldExtra(fld, FLD_EDITABLE | FLD_REQUIRED, 42, 63);
+    fld = addInputField(iF, LUA_TPASSWORD, "psswrd", "Re-enter your password",
+                        "Warning, the limit on password length is set by your viewer, some can't handle longer than 16 characters.", passwordValidate, passwordWeb);
+    inputFieldExtra(fld, FLD_EDITABLE, 16, 0);
+    addEmailFields(iF);
+    addDoBFields(iF);
+    addLegalFields(iF);
+    fld = addInputField(iF, LUA_TSTRING, "ToS", "Terms of Service", "", NULL, ToSWeb);
+    fld = addInputField(iF, LUA_TSTRING, "voucher", "The grid name of someone that will vouch for you", 
+                        "We use a vouching system here, an existing member must know you well enough to tell us you'll be good for our grid.", voucherValidate, voucherWeb);
+    inputFieldExtra(fld, FLD_EDITABLE, 42, 63);
+    fld = addInputField(iF, LUA_TSTRING, "aboutMe", "About me", NULL, aboutMeValidate, aboutMeWeb);
+    inputFieldExtra(fld, FLD_EDITABLE, 50, 16384);
+    addSubmit(iF, "confirm", "confirm", NULL, accountAddSub, "accountView");
+    addSubmit(iF, "cancel",  "cancel",  NULL, accountOutSub, "accountLogin");
+
+
+    iF = newInputForm("accountView", "account view", NULL, accountViewWeb, accountLoginWeb);
+    addSession(iF);
+//    fld = addInputField(iF, LUA_TSTRING, "UUID", "UUID", NULL, UUIDValidate, UUIDWeb);
+//    inputFieldExtra(fld, FLD_HIDDEN, 0, 0);
+    fld = addInputField(iF, LUA_TSTRING, "name", "name", NULL, nameValidate, nameWeb);
+    inputFieldExtra(fld, FLD_HIDDEN, 42, 63);
+    fld = addInputField(iF, LUA_TSTRING, "user", "user", NULL, nameValidate, nameWeb);
+    inputFieldExtra(fld, FLD_HIDDEN, 42, 63);
+    addSubmit(iF, "login",    "",        NULL, accountViewSub,     "accountView");              // Coz we sometimes want to trigger this from code.
+    addSubmit(iF, "validate", "",        NULL, accountValidateSub, "accountLogin");             // Coz we sometimes want to trigger this from code.
+    addSubmit(iF, "edit",     "",        NULL, accountEditSub,     "accountEdit");              // Coz we sometimes want to trigger this from code.
+    addSubmit(iF, "validated_members",  "validated members", NULL, accountExploreValidatedVoucherSub,  "accountValidated");
+    addSubmit(iF, "logout",   "logout",  NULL, accountOutSub,      "accountLogin");
+
+
+    iF = newInputForm("accountValidated", "account validated list", NULL, accountExploreValidatedVouchersWeb, accountLoginWeb);
+    addSession(iF);
+    fld = addInputField(iF, LUA_TSTRING, "name", "name", NULL, nameValidate, nameWeb);
+    inputFieldExtra(fld, FLD_HIDDEN, 42, 63);
+    addSubmit(iF, "login",  "",      NULL, accountViewSub,     "accountView");          // Coz we sometimes want to trigger this from code.
+    addSubmit(iF, "back",   "back",  NULL, accountViewSub,     "accountView");
+
+
+    iF = newInputForm("accountEdit", "account edit", NULL, accountEditWeb, accountLoginWeb);
+    addSession(iF);
+//    fld = addInputField(iF, LUA_TSTRING, "UUID", "UUID", NULL, UUIDValidate, UUIDWeb);
+//    inputFieldExtra(fld, FLD_HIDDEN, 0, 0);
+//    fld = addInputField(iF, LUA_TSTRING, "name", "name", NULL, nameValidate, nameWeb);
+//    inputFieldExtra(fld, FLD_HIDDEN, 42, 63);
+//    fld = addInputField(iF, LUA_TSTRING, "user", "user", NULL, nameValidate, nameWeb);
+//    inputFieldExtra(fld, FLD_HIDDEN, 42, 63);
+//    fld = addInputField(iF, LUA_TEMAIL, "email", "email", "", emailValidate, emailWeb);
+//    inputFieldExtra(fld, FLD_NONE, 42, 254);
+    addSubmit(iF, "login",   "",        NULL, accountViewSub,     "accountView");               // Coz we sometimes want to trigger this from code.
+    addSubmit(iF, "save",    "save",    NULL, accountSaveSub,     "accountView");
+    addSubmit(iF, "back",  "back",  NULL, accountViewSub,      "accountView");
+//    addSubmit(iF, "members", "members", NULL, accountExploreSub,  "accountExplore");
+    addSubmit(iF, "logout",  "logout",  NULL, accountOutSub,      "accountLogin");
+//    addSubmit(iF, "delete",  "delete",  NULL, accountDelSub,      "accountDel");
+
+
+    iF = newInputForm("accountLogin", "account login", "Please login, or create your new account.", accountLoginWeb, accountLoginWeb);
+    addSession(iF);
+    fld = addInputField(iF, LUA_TSTRING, "name", "name", "Your name needs to be two words, only ordinary letters and digits, no special characters or fonts.", nameValidate, nameWeb);
+    inputFieldExtra(fld, FLD_EDITABLE | FLD_REQUIRED, 42, 63);
+    fld = addInputField(iF, LUA_TPASSWORD, "password", "password",
+                        "Warning, the limit on password length is set by your viewer, some can't handle longer than 16 characters.", passwordValidate, passwordWeb);
+    inputFieldExtra(fld, FLD_EDITABLE | FLD_REQUIRED, 16, 0);
+    addSubmit(iF, "logout", "",       NULL, accountOutSub,      "accountLogin");                // Coz we sometimes want to trigger this from code.
+    addSubmit(iF, "validate", "",     NULL, accountValidateSub, "accountLogin");                // Coz we sometimes want to trigger this from code.
+    addSubmit(iF, "login",  "login",  NULL, accountViewSub,     "accountView");
+    addSubmit(iF, "create", "create account", NULL, accountCreateSub,   "accountAdd");
+  }
+
+  // Figure out what we are doing.
+  if ('\0' == form[0])
+    form = getStrH(Rd->cookies, "form");
+  if ('\0' == form[0])
+  {
+    form = "accountLogin";
+    Rd->shs.status = SHS_NUKE;
+  }
+  if ('\0' == doit[0])
+    doit = getStrH(Rd->cookies, "doit");
+  if ('\0' == doit[0])
+  {
+    doit = "logout";
+    Rd->shs.status = SHS_NUKE;
+  }
+  if ('\0' != doit[0])
+  {
+    setCookie(Rd, "doit", doit);
+    Rd->doit = doit;
+  }
+
+  iF = accountPages->get(accountPages, form, NULL, false);
+  if (NULL == iF)
+  {
+    E("No such account page - %s", form);
+    form = "accountLogin";
+    doit = "logout";
+    Rd->shs.status = SHS_PROBLEM;
+    iF = accountPages->get(accountPages, form, NULL, false);
+  }
+  sub = iF->subs->get(iF->subs, doit, NULL, false);
+  if (NULL == sub)
+  {
+    E("No such account action - %s", doit);
+    form = "accountLogin";
+    doit = "logout";
+    Rd->shs.status = SHS_PROBLEM;
+    iF = accountPages->get(accountPages, form, NULL, false);
+    sub = iF->subs->get(iF->subs, doit, NULL, false);
+  }
+
+  // Special for showing a users details.
+  if ('\0' != getStrH(Rd->queries, "user")[0])
+  {
+    doit = "edit";
+    form = "accountView";
+    iF = accountPages->get(accountPages, form, NULL, false);
+    sub = iF->subs->get(iF->subs, doit, NULL, false);
+  }
+
+  Rd->doit = doit;
+  Rd->form = form;
+  Rd->output = sub->outputForm;
+
+  C("Starting dynamic page %s  %s -> %s [%s -> %s]", Rd->RUri, form, doit, sub->name, Rd->output);
+
+  // Collect the input data.
+  int count = iF->fields->size(iF->fields);
+  inputValue *iV = xzalloc(count * sizeof(inputValue));
+  qlisttbl_obj_t obj;
+
+  sessionStateEngine(Rd, "collected");
+
+  if (strcmp("cancel", sub->name) != 0)
+  {
+
+// TODO - complain about any extra body or query parameter that we where not expecting.
+  for (t = 0; t < 3; t++)
+    i = collectFields(Rd, iF, iV, t);
+
+  // Validate the input data.
+  D("For page %s -> %s, start of validation.", iF->name, sub->name);
+  t = i;
+  for (i = 0; i < t; i++)
+  {
+    if ((NULL != iV[i].value) || (LUA_TGROUP == iV[i].field->type))
+    {
+      if (NULL == iV[i].field->validate)
+        E("No validation function for %s - %s", iF->name, iV[i].field->name);
+      else
+      {
+        if (0 == iV[i].valid)
+        {
+          D("Validating %s - %s", iF->name, iV[i].field->name);
+          int rt = iV[i].field->validate(Rd, iF, &iV[i]);
+          if (rt)
+          {
+            W("Invalidated %s - %s returned %d errors", iF->name, iV[i].field->name, rt);
+            iV[i].valid = -1;
+          }
+          else
+          {
+            D("Validated %s - %s", iF->name, iV[i].field->name);
+            iV[i].valid = 1;
+          }
+          e += rt;
+          if (NULL != iV[i].field->group)
+          {
+            // Use the indexes to set the validation result for the other members of the group.
+            // The assumption is that the validation functions for each are the same, and it validates the members as a group.
+            for (j = iV[i].index; j > 0; j--)
+              iV[i + j].valid = iV[i].valid;
+// TODO - Possible off by one error, but I don't think it matters.  Needs more testing.
+            for (j = 0; j <= iV[i].index; j++)
+              iV[i + j].valid = iV[i].valid;
+          }
+        }
+        else if (0 > iV[i].valid)
+          D("Already invalidated %s - %s", iF->name, iV[i].field->name);
+        else if (0 < iV[i].valid)
+          D("Already validated %s - %s", iF->name, iV[i].field->name);
+      }
+    }
+    doit = Rd->doit;
+    form = Rd->form;
+  }
+
+  sessionStateEngine(Rd, "validated");
+
+  // Submit the data.  Reload input form and sub in case things got changed by the validation functions.
+  iF = accountPages->get(accountPages, Rd->form, NULL, false);
+  sub = iF->subs->get(iF->subs, Rd->doit, NULL, false);
+//if (strcmp("POST", Rd->Method) == 0)  // Not such a good idea, since we are faking a submit for account validation, which is a GET.
+{
+  if (0 == e)
+  {
+    D("For page %s, start of %s submission.", iF->name, sub->name);
+    if (NULL != sub->submit)
+      e += sub->submit(Rd, iF, iV);
+  }
+}
+  free(iV);
+
+  }
+  else
+  {
+    sessionStateEngine(Rd, "CANCELLED");
+  }
+
+  sessionStateEngine(Rd, "submited");
+  switch (Rd->shs.status)
+  {
+    case SHS_RENEW:
+    case SHS_REFRESH:
+    {
+      freeSesh(Rd, FALSE, FALSE);
+      newSesh(Rd, FALSE);
+      break;
+    }
+
+    case SHS_VALID:
+    case SHS_KEEP:
+    {
+      // Do nothing here.
+      break;
+    }
+
+    case SHS_LOGIN:
+    case SHS_WIPE:
+    {
+// TODO - should wipe the old one, and create this new one with the users UUID.
+//          I think that's what we are doing anyway.
+      freeSesh(Rd, FALSE, FALSE);
+      newSesh(Rd, FALSE);
+      break;
+    }
+
+// TODO - these three should store state, so they can go back to where the user was (or where they where going) before asking them to confirm their login credentials.
+    case SHS_IDLE:
+    case SHS_SECURITY:
+    case SHS_RELOGIN:
+
+    case SHS_UNKNOWN:
+    case SHS_NONE:
+    case SHS_BOGUS:
+    case SHS_PROBLEM:
+    case SHS_ANCIENT:
+    case SHS_NUKE:
+    {
+      freeSesh(Rd, FALSE, TRUE);        // Wipe mode clears out all of Rd->database, selected Rd->stuff, and the above commented out Rd->shs.
+      newSesh(Rd, FALSE);
+      form = "accountLogin";
+      doit = "logout";
+      Rd->doit = doit;
+      Rd->form = form;
+      iF = accountPages->get(accountPages, Rd->form, NULL, false);
+      sub = iF->subs->get(iF->subs, Rd->doit, NULL, false);
+      Rd->output = sub->outputForm;
+      break;
+    }
+  }
+
+  // Return the result.
+  if (0 == e)
+  {
+    if (strcmp("GET", Rd->Method) == 0)
+    {
+      // Find the output form.
+      inputForm *oF = accountPages->get(accountPages, Rd->output, NULL, false);
+      if (NULL == oF)
+      {
+        E("No such account page - %s", Rd->output);
+        form = "accountLogin";
+        doit = "logout";
+        oF = accountPages->get(accountPages, form, NULL, false);
+      }
+      D("Building output page %s", oF->name);
+      count = oF->fields->size(oF->fields);
+      iV = xzalloc(count * sizeof(inputValue));
+      collectFields(Rd, oF, iV, -1);
+      collectFields(Rd, oF, iV, 3);
+      oF->web(Rd, oF, iV);
+      free(iV);
+    }
+    else
+    {
+      // Redirect to a GET if it was a POST.
+      // The reason here is to avoid a refresh turning into a rePOST.
+      if ((strcmp("POST", Rd->Method) == 0))
+      {
+        if ('\0' != Rd->form[0])
+          setCookie(Rd, "form", Rd->form);
+        if ('\0' != Rd->doit[0])
+          setCookie(Rd, "doit", Rd->doit);
+        Rd->Rheaders->putstr (Rd->Rheaders, "Status", "303 See Other");
+        Rd->Rheaders->putstrf(Rd->Rheaders, "Location", "https://%s%s%s", Rd->Host, Rd->RUri, Rd->outQuery);
+        Rd->reply->addstrf(Rd->reply, "<html><title>Post POST redirect</title><head>"
+                                  "<meta http-equiv='refresh' content='0; URL=https://%s%s%s' />"
+                                  "</head><body>You should get redirected to <a href='https://%s%s%s'>https://%s%s%s</a></body></html>",
+                                  Rd->Host, Rd->RUri, Rd->outQuery, Rd->Host, Rd->RUri, Rd->outQuery, Rd->Host, Rd->RUri, Rd->outQuery
+                        );
+        I("Redirecting dynamic page %s  ->  https://%s%s%s   (%s)", file, Rd->Host, Rd->RUri, Rd->outQuery, Rd->form);
+      }
+    }
+  }
+  else
+  {
+    if (0 < e)
+      E("Building output ERROR page %s, coz of %d errors.", iF->name, e);
+    else
+      D("Building alternate output page %s", iF->name);
+    // First just sort out input groups, then get the data from Rd->stuff.
+    count = iF->fields->size(iF->fields);
+    iV = xzalloc(count * sizeof(inputValue));
+    collectFields(Rd, iF, iV, -1);
+    collectFields(Rd, iF, iV, 3);
+    iF->eWeb(Rd, iF, iV);
+    free(iV);
+  }
+
+  free(Rd->outQuery);
+  Rd->outQuery = NULL;
+
+  C("Ending dynamic page  %s  %s", Rd->RUri, form);
+}
+
+
+static void cleanup(void) 
+{
+// TODO - not sure why, but this gets called twice on quitting sometimes.
+  C("Caught signal, or quitting, cleaning up.");
+
+  if (accountPages)
+  {
+    qhashtbl_obj_t obj;
+
+    memset((void*)&obj, 0, sizeof(obj));
+    accountPages->lock(accountPages);
+    while(accountPages->getnext(accountPages, &obj, false) == true)
+    {
+      inputForm *f = (inputForm *) obj.data;
+
+      f->subs->free(f->subs);
+      qlisttbl_obj_t fobj;
+
+      memset((void *) &fobj, 0, sizeof(fobj));
+      f->fields->lock(f->fields);
+      while(f->fields->getnext(f->fields, &fobj, NULL, false) == true)
+      {
+        inputField *fld = (inputField *) fobj.data;
+
+        if (LUA_TGROUP == fld->type)
+          free(fld->group);
+      }
+      f->fields->unlock(f->fields);
+      f->fields->free(f->fields);
+    }
+    accountPages->unlock(accountPages);
+    accountPages->free(accountPages);
+    accountPages = NULL;
+  }
+
+  if (dynPages)         dynPages->free(dynPages);
+  dynPages = NULL;
+  if (HTMLfileCache)
+  {
+    qhashtbl_obj_t obj;
+
+    memset((void*)&obj, 0, sizeof(obj));
+    HTMLfileCache->lock(HTMLfileCache);
+    while(HTMLfileCache->getnext(HTMLfileCache, &obj, false) == true)
+    {
+      HTMLfile *f = (HTMLfile *) obj.data;
+
+      unfragize(f->fragments, NULL, TRUE);
+    }
+    HTMLfileCache->unlock(HTMLfileCache);
+    HTMLfileCache->free(HTMLfileCache);
+    HTMLfileCache = NULL;
+  }
+  if (mimeTypes)        mimeTypes->free(mimeTypes);
+  mimeTypes = NULL;
+  freeDb(true);
+  if (L)                lua_close(L);
+  L = NULL;
+  if (stats)
+  {
+    if (stats->stats)   stats->stats->free(stats->stats);
+    free(stats);
+    stats = NULL;
+  }
+  if (configs)          configs->free(configs);
+  configs = NULL;
+}
+
+
+void sledjchisl_main(void)
+{
+  char *cmd = *toys.optargs;
+  char *tmp;
+  struct stat statbuf;
+  int status, result, i;
+  void *vd;
+
+  configs = qhashtbl(0, 0);
+  L = luaL_newstate();
+
+  I("libfcgi version: %s", FCGI_VERSION);
+  I("Lua version: %s", LUA_RELEASE);
+  I("LuaJIT version: %s", LUAJIT_VERSION);
+  I("MariaDB / MySQL client version: %s", mysql_get_client_info());
+  I("OpenSSL version: %s", OPENSSL_VERSION_TEXT);
+  I("qLibc version: qLibc only git tags for version numbers.  Sooo, 2.4.4, unless I forgot to update this.");
+  I("toybox version: %s", TOYBOX_VERSION);
+
+  dbRequests = qlist(0);
+  sigatexit(cleanup);
+
+  pwd = getcwd(0, 0);
+
+  if (-1 == fstat(STDIN_FILENO, &statbuf))
+  {
+    error_msg("fstat() failed");
+    if (1 != isatty(STDIN_FILENO))
+      isWeb = TRUE;
+  }
+  else
+  {
+         if (S_ISREG (statbuf.st_mode)) D("STDIN is a regular file.");
+    else if (S_ISDIR (statbuf.st_mode)) D("STDIN is a directory.");
+    else if (S_ISCHR (statbuf.st_mode)) D("STDIN is a character device.");
+    else if (S_ISBLK (statbuf.st_mode)) D("STDIN is a block device.");
+    else if (S_ISFIFO(statbuf.st_mode)) D("STDIN is a FIFO (named pipe).");
+    else if (S_ISLNK (statbuf.st_mode)) D("STDIN is a symbolic link.");
+    else if (S_ISSOCK(statbuf.st_mode)) D("STDIN is a socket.");
+    else                                D("STDIN is a unknown file descriptor type.");
+    if (!S_ISCHR(statbuf.st_mode))
+      isWeb = TRUE;
+  }
+
+  // Print our user name and groups.
+  struct passwd *pw;
+  struct group *grp;
+  uid_t euid = geteuid();
+  gid_t egid = getegid();
+  gid_t *groups = (gid_t *)toybuf;
+  i = sizeof(toybuf)/sizeof(gid_t);
+  int ngroups;
+
+  pw = xgetpwuid(euid);
+  I("Running as user %s", pw->pw_name);
+
+  grp = xgetgrgid(egid);
+  ngroups = getgroups(i, groups);
+  if (ngroups < 0) perror_exit("getgroups");
+  D("User is in group %s", grp->gr_name);
+  for (i = 0; i < ngroups; i++) {
+    if (groups[i] != egid)
+    {
+      if ((grp = getgrgid(groups[i])))
+        D("User is in group %s", grp->gr_name);
+      else
+        D("User is in group %u", groups[i]);
+    }
+  }
+
+
+/*  From http://luajit.org/install.html -
+To change or extend the list of standard libraries to load, copy
+src/lib_init.c to your project and modify it accordingly. Make sure the
+jit library is loaded or the JIT compiler will not be activated.
+*/
+  luaL_openlibs(L); // Load Lua libraries.
+
+  // Load the config scripts.
+  char *cPaths[] =
+  {
+    ".sledjChisl.conf.lua",
+    "/etc/sledjChisl.conf.lua",
+//    "/etc/sledjChisl.d/*.lua",
+    "~/.sledjChisl.conf.lua",
+//    "~/.config/sledjChisl/*.lua",
+    NULL
+  };
+  struct stat st;
+
+
+  for (i = 0; cPaths[i]; i++)
+  {
+    memset(toybuf, 0, sizeof(toybuf));
+    if (('/' == cPaths[i][0]) || ('~' == cPaths[i][0]))
+      snprintf(toybuf, sizeof(toybuf), "%s", cPaths[i]);
+    else
+      snprintf(toybuf, sizeof(toybuf), "%s/%s", pwd, cPaths[i]);
+    if (0 != lstat(toybuf, &st))
+      continue;
+    I("Loading configuration file - %s", toybuf);
+    status = luaL_loadfile(L, toybuf);
+    if (status) // If something went wrong, error message is at the top of the stack.
+      E("Couldn't load file: %s", lua_tostring(L, -1));
+    else
+    {
+      result = lua_pcall(L, 0, LUA_MULTRET, 0);
+      if (result)
+        E("Failed to run script: %s", lua_tostring(L, -1));
+      else
+      {
+        lua_getglobal(L, "config");
+        lua_pushnil(L);
+        while(lua_next(L, -2) != 0)
+        {
+          char *n = (char *) lua_tostring(L, -2);
+
+          // Numbers can convert to strings, so check for numbers before checking for strings.
+          // On the other hand, strings that can be converted to numbers also pass lua_isnumber().  sigh
+          if (lua_isnumber(L, -1))
+          {
+            float v = lua_tonumber(L, -1);
+            configs->put(configs, n, &v, sizeof(float));
+          }
+          else if (lua_isstring(L, -1))
+            configs->putstr(configs, n, (char *) lua_tostring(L, -1));
+          else if (lua_isboolean(L, -1))
+          {
+            int v = lua_toboolean(L, -1);
+            configs->putint(configs, n, v);
+          }
+          else
+          {
+            char *v = (char *) lua_tostring(L, -1);
+            E("Unknown config variable type for %s = %s", n, v);
+          }
+          lua_pop(L, 1);
+        }
+      }
+    }
+  }
+  DEBUG = configs->getint(configs, "debug");
+  D("Setting DEBUG = %d", DEBUG);
+  if ((vd  = configs->get   (configs, "loadAverageInc", NULL, false))   != NULL)  {loadAverageInc       =       *((float *) vd);        D("Setting loadAverageInc = %f", loadAverageInc);}
+  if ((vd  = configs->get   (configs, "simTimeOut",     NULL, false))   != NULL)  {simTimeOut           = (int) *((float *) vd);        D("Setting simTimeOut = %d", simTimeOut);}
+  if ((tmp = configs->getstr(configs, "scRoot",   false))               != NULL)  {scRoot               = tmp;                          D("Setting scRoot = %s", scRoot);}
+  if ((tmp = configs->getstr(configs, "scUser",   false))               != NULL)  {scUser               = tmp;                          D("Setting scUser = %s", scUser);}
+  if ((tmp = configs->getstr(configs, "Tconsole", false))               != NULL)  {Tconsole             = tmp;                          D("Setting Tconsole = %s", Tconsole);}
+  if ((tmp = configs->getstr(configs, "Tsocket",  false))               != NULL)  {Tsocket              = tmp;                          D("Setting Tsocket = %s", Tsocket);}
+  if ((tmp = configs->getstr(configs, "Ttab",     false))               != NULL)  {Ttab                 = tmp;                          D("Setting Ttab = %s", Ttab);}
+  if ((tmp = configs->getstr(configs, "webRoot",  false))               != NULL)  {webRoot              = tmp;                          D("Setting webRoot = %s", webRoot);}
+  if ((tmp = configs->getstr(configs, "URL",      false))               != NULL)  {URL                  = tmp;                          D("Setting URL = %s", URL);}
+  if ((vd  = configs->get   (configs, "seshRenew",      NULL, false))   != NULL)  {seshRenew            = (int) *((float *) vd);        D("Setting seshRenew = %d", seshRenew);}
+  if ((vd  = configs->get   (configs, "idleTimeOut",    NULL, false))   != NULL)  {idleTimeOut          = (int) *((float *) vd);        D("Setting idleTimeOut = %d", idleTimeOut);}
+  if ((vd  = configs->get   (configs, "seshTimeOut",    NULL, false))   != NULL)  {seshTimeOut          = (int) *((float *) vd);        D("Setting seshTimeOut = %d", seshTimeOut);}
+  if ((vd  = configs->get   (configs, "newbieTimeOut",  NULL, false))   != NULL)  {newbieTimeOut        = (int) *((float *) vd);        D("Setting newbieTimeOut = %d", newbieTimeOut);}
+  if ((tmp = configs->getstr(configs, "ToS",      false))               != NULL)  {ToS                  = tmp;                          D("Setting ToS = %s", ToS);}
+  if ((tmp = configs->getstr(configs, "webIframers", false))            != NULL)  {webIframers          = tmp;                          D("Setting webIframers = %s", webIframers);}
+
+
+  // Use a FHS compatible setup -
+  if (strcmp("/", scRoot) == 0)
+  {
+    scBin       = "/bin";
+    scEtc       = "/etc/opensim_SC";
+    scLib       = "/usr/lib/opensim_SC";
+    scRun       = "/run/opensim_SC";
+    scBackup    = "/var/backups/opensim_SC";
+    scCache     = "/var/cache/opensim_SC";
+    scData      = "/var/lib/opensim_SC";
+    scLog       = "/var/log/opensim_SC";
+  }
+  else if (strcmp("/usr/local", scRoot) == 0)
+  {
+    scBin       = "/usr/local/bin";
+    scEtc       = "/usr/local/etc/opensim_SC";
+    scLib       = "/usr/local/lib/opensim_SC";
+    scRun       = "/run/opensim_SC";
+    scBackup    = "/var/local/backups/opensim_SC";
+    scCache     = "/var/local/cache/opensim_SC";
+    scData      = "/var/local/lib/opensim_SC";
+    scLog       = "/var/local/log/opensim_SC";
+  }
+  else  // A place for everything to live, like /opt/opensim_SC
+  {
+    char *slsh = "";
+
+    if ('/' != scRoot[0])
+    {
+      E("scRoot is not an absolute path - %s.", scRoot);
+      slsh = "/";
+    }
+    // The problem here is that OpenSim already uses /opt/opensim_SC/current/bin for all of it's crap, where they mix everything together.
+    // Don't want it in the path.
+    // Could put the .dlls into lib.  Most of the rest is config files or common assets.
+    // Or just slowly migrate opensim stuff to FHS.
+    scBin       = xmprintf("%s%s/bin",          slsh, scRoot);
+    scEtc       = xmprintf("%s%s/etc",          slsh, scRoot);
+    scLib       = xmprintf("%s%s/lib",          slsh, scRoot);
+    scRun       = xmprintf("%s%s/var/run",      slsh, scRoot);
+    scBackup    = xmprintf("%s%s/var/backups",  slsh, scRoot);
+    scCache     = xmprintf("%s%s/var/cache",    slsh, scRoot);
+    scData      = xmprintf("%s%s/var/lib",      slsh, scRoot);
+    scLog       = xmprintf("%s%s/var/log",      slsh, scRoot);
+  }
+
+
+// TODO - still a bit chicken and egg here about the tmux socket and reading configs from scEtc /.sledjChisl.conf.lua
+  if (!isWeb)
+  {
+    I("Outputting to a terminal, not a web server.");
+    // Check if we are already running inside the proper tmux server.
+    char *eTMUX = getenv("TMUX");
+    memset(toybuf, 0, sizeof(toybuf));
+    snprintf(toybuf, sizeof(toybuf), "%s/%s", scRun, Tsocket);
+    if (((eTMUX) && (0 == strncmp(toybuf, eTMUX, strlen(toybuf)))))
+    {
+      I("Running inside the proper tmux server. %s", eTMUX);
+      isTmux = TRUE;
+    }
+    else
+      I("Not running inside the proper tmux server, starting it. %s == %s", eTMUX, toybuf);
+  }
+
+  if (isTmux || isWeb)
+  {
+    char *d;
+
+    // Doing this here coz at this point we should be the correct user.
+    if ((! qfile_exist(scBin))    && (! qfile_mkdir(scBin,      S_IRUSR | S_IWUSR | S_IXUSR | S_IRGRP | S_IXGRP, true)))  C("Unable to create path %s", scBin);
+    if ((! qfile_exist(scEtc))    && (! qfile_mkdir(scEtc,      S_IRUSR | S_IWUSR | S_IXUSR | S_IRGRP | S_IXGRP, true)))  C("Unable to create path %s", scEtc);
+    if ((! qfile_exist(scLib))    && (! qfile_mkdir(scLib,      S_IRUSR | S_IWUSR | S_IXUSR | S_IRGRP | S_IXGRP, true)))  C("Unable to create path %s", scLib);
+    if ((! qfile_exist(scRun))    && (! qfile_mkdir(scRun,      S_IRUSR | S_IWUSR | S_IXUSR | S_IRGRP | S_IWGRP | S_IXGRP | S_ISGID, true)))  C("Unable to create path %s", scRun);
+    if ((! qfile_exist(scBackup)) && (! qfile_mkdir(scBackup,   S_IRUSR | S_IWUSR | S_IXUSR | S_IRGRP | S_IXGRP, true)))  C("Unable to create path %s", scBackup);
+// TODO - the path to scCache/sledjchisl.socket needs to be readable by the www-data group.     So the FCGI socket will work.
+//          AND it needs to be group sticky on opensimsc group.                                 So the tmux socket will work.
+//          So currently scCache is www-data readable, and scRun is group sticky.
+    if ((! qfile_exist(scCache))  && (! qfile_mkdir(scCache,    S_IRUSR | S_IWUSR | S_IXUSR | S_IRGRP | S_IXGRP, true)))  C("Unable to create path %s", scCache);
+    if ((! qfile_exist(scData))   && (! qfile_mkdir(scData,     S_IRUSR | S_IWUSR | S_IXUSR | S_IRGRP | S_IXGRP, true)))  C("Unable to create path %s", scData);
+    if ((! qfile_exist(scLog))    && (! qfile_mkdir(scLog,      S_IRUSR | S_IWUSR | S_IXUSR | S_IRGRP | S_IXGRP, true)))  C("Unable to create path %s", scLog);
+    tmp = xmprintf("%s/sessions", scCache);
+    if ((! qfile_exist(tmp))      && (! qfile_mkdir(tmp,        S_IRUSR | S_IWUSR | S_IXUSR | S_IRGRP | S_IXGRP, true)))  C("Unable to create path %s", tmp);
+    free(tmp);
+    tmp = xmprintf("%s/users", scData);
+    if ((! qfile_exist(tmp))      && (! qfile_mkdir(tmp,        S_IRUSR | S_IWUSR | S_IXUSR | S_IRGRP | S_IXGRP, true)))  C("Unable to create path %s", tmp);
+    free(tmp);
+
+
+    mimeTypes = qhashtbl(0, 0);
+    mimeTypes->putstr(mimeTypes, "gz",          "application/gzip");
+    mimeTypes->putstr(mimeTypes, "js",          "application/javascript");
+    mimeTypes->putstr(mimeTypes, "json",        "application/json");
+    mimeTypes->putstr(mimeTypes, "pdf",         "application/pdf");
+    mimeTypes->putstr(mimeTypes, "rtf",         "application/rtf");
+    mimeTypes->putstr(mimeTypes, "zip",         "application/zip");
+    mimeTypes->putstr(mimeTypes, "xz",          "application/x-xz");
+    mimeTypes->putstr(mimeTypes, "gif",         "image/gif");
+    mimeTypes->putstr(mimeTypes, "png",         "image/png");
+    mimeTypes->putstr(mimeTypes, "jp2",         "image/jp2");
+    mimeTypes->putstr(mimeTypes, "jpg2",        "image/jp2");
+    mimeTypes->putstr(mimeTypes, "jpe",         "image/jpeg");
+    mimeTypes->putstr(mimeTypes, "jpg",         "image/jpeg");
+    mimeTypes->putstr(mimeTypes, "jpeg",        "image/jpeg");
+    mimeTypes->putstr(mimeTypes, "svg",         "image/svg+xml");
+    mimeTypes->putstr(mimeTypes, "svgz",        "image/svg+xml");
+    mimeTypes->putstr(mimeTypes, "tif",         "image/tiff");
+    mimeTypes->putstr(mimeTypes, "tiff",        "image/tiff");
+    mimeTypes->putstr(mimeTypes, "css",         "text/css");
+    mimeTypes->putstr(mimeTypes, "html",        "text/html");
+    mimeTypes->putstr(mimeTypes, "htm",         "text/html");
+    mimeTypes->putstr(mimeTypes, "shtml",       "text/html");
+//    mimeTypes->putstr(mimeTypes, "md",        "text/markdown");
+//    mimeTypes->putstr(mimeTypes, "markdown",  "text/markdown");
+    mimeTypes->putstr(mimeTypes, "txt",         "text/plain");
+
+    memset(toybuf, 0, sizeof(toybuf));
+    snprintf(toybuf, sizeof(toybuf), "%s/config/config.ini", scRoot);
+
+// TODO - it looks like OpenSim invented their own half arsed backwards INI file include system.
+//          I doubt qLibc supports it, like it supports what seems to be the standard include system.
+//          Not sure if we need to worry about it just yet.
+// TODO - this leaks memory, but it's a bug in qLibc.  Send the bug fix upstream.
+    qlisttbl_t *qconfig = qconfig_parse_file(NULL, toybuf, '=');
+    if (NULL == qconfig)
+    {
+      E("Can't read config file %s", toybuf);
+      goto finished;
+    }
+    d = qstrunchar(qconfig->getstr(qconfig, "Const.ConnectionString", false), '"', '"');
+
+    if (NULL == d)
+    {
+      E("No database credentials in %s!", toybuf);
+      goto finished;
+    }
+    else
+    {
+      char *p0, *p1, *p2;
+      if (NULL == (d = strdup(d)))
+      {
+        E("Out of memory!");
+        goto finished;
+      }
+      // Data Source=MYSQL_HOST;Database=MYSQL_DB;User ID=MYSQL_USER;Password=MYSQL_PASSWORD;Old Guids=true;
+      p0 = d;
+      while (NULL != p0)
+      {
+        p1 = strchr(p0, '=');
+        if (NULL == p1) break;
+        *p1 = '\0';
+        p2 = strchr(p1 + 1, ';');
+        if (NULL == p2) break;
+        *p2 = '\0';
+        configs->putstr(configs, p0, p1 + 1);   // NOTE - this allocs memory for it's key and it's data.
+        p0 = p2 + 1;
+        if ('\0' == *p0)
+          p0 = NULL;
+      };
+      free(d);
+    }
+
+// TODO - should also load god names, and maybe the SMTP stuff.
+//          Note that the OpenSim SMTP stuff is ONLY for LSL script usage, we probably want to put it in the Lua config file instead.
+
+    if (mysql_library_init(toys.optc, toys.optargs, NULL))
+    {
+      E("mysql_library_init() failed!");
+      goto finished;
+    }
+    if (!dbConnect())
+      goto finished;
+
+    // Need to kick this off.
+    stats = getStats(database, stats);
+    char *h = qstrunchar(qconfig->getstr(qconfig, "Const.HostName", false), '"', '"');
+    char *p = qstrunchar(qconfig->getstr(qconfig, "Const.PublicPort", false), '"', '"');
+    stats->stats->putstr(stats->stats, "grid",  qstrunchar(qconfig->getstr(qconfig, "Const.GridName", false), '"', '"'));
+    stats->stats->putstr(stats->stats, "HostName",      h);
+    stats->stats->putstr(stats->stats, "PublicPort",    p);
+    snprintf(toybuf, sizeof(toybuf), "http://%s:%s/", h, p);
+
+    stats->stats->putstr(stats->stats, "uri",   toybuf);
+    qconfig->free(qconfig);
+  }
+
+
+  if (isWeb)
+  {
+    char **initialEnv = environ;
+    char *tmp0, *tmp1;
+    int count = 0, entries, bytes;
+
+    dynPages = qhashtbl(0, 0);
+    newDynPage("account.html", (pageFunction) account_html);
+
+    // FCGI_LISTENSOCK_FILENO is the socket to the web server.
+    // STDOUT and STDERR go to the web servers error log, or at least it does in Apache 2 mod_fcgid.
+    I("Running SledjChisl inside a web server, pid %d.", getpid());
+
+    if (0 == toys.optc)
+      D("no args");
+    else
+    {
+      for (entries = 0, bytes = -1; entries < toys.optc; entries++)
+        D("ARG %s\n", toys.optargs[entries]);
+    }
+    printEnv(environ);
+
+/*
+?    https://stackoverflow.com/questions/30707792/how-to-disable-buffering-with-apache2-and-mod-proxy-fcgi
+    https://z-issue.com/wp/apache-2-4-the-event-mpm-php-via-mod_proxy_fcgi-and-php-fpm-with-vhosts/
+        A lengthy and detailed "how to set this up with PHP" that might be useful.
+    https://www.apachelounge.com/viewtopic.php?t=4385
+        "Also the new mod_proxy_fcgi for Apache 2.4 seems to be crippled just like mod_fcgid in terms of being limited to just one request per process at a time."
+        But then so is the silly fcgi2 SDK, which basically assumes it's a CGI wrapper, not proper FCGI.
++           I could even start the spawn-fcgi process from the tmux instance of sledjchisl.
++               Orrr just open the socket / port myself from the tmux instance and do the raw FCGI thing through it.
+*/
+    while (FCGI_Accept() != -1)
+    {
+      reqData *Rd       = xzalloc(sizeof(reqData));
+
+      if (-1 == clock_gettime(CLOCK_REALTIME, &Rd->then))
+        perror_msg("Unable to get the time.");
+      Rd->L             = L;
+      Rd->configs       = configs;
+//      Rd->queries     = qhashtbl(0, 0);       // Inited in toknize below.
+//      Rd->body        = qhashtbl(0, 0);       // Inited in toknize below.
+//      Rd->cookies     = qhashtbl(0, 0);       // Inited in toknize below.
+      Rd->headers       = qhashtbl(0, 0);
+      Rd->valid         = qhashtbl(0, 0);
+      Rd->stuff         = qhashtbl(0, 0);
+      Rd->database      = qhashtbl(0, 0);
+      Rd->Rcookies      = qhashtbl(0, 0);
+      Rd->Rheaders      = qhashtbl(0, 0);
+      Rd->stats         = stats;
+      Rd->errors        = qlist(0);
+      Rd->messages      = qlist(0);
+      Rd->reply         = qgrow(QGROW_THREADSAFE);
+      Rd->outQuery      = xstrdup("");
+      Rd->shs.status    = SHS_UNKNOWN;
+      qhashtbl_obj_t    hobj;
+      qlist_obj_t       lobj;
+
+      // So far I'm seeing these as all caps, but I don't think they are defined that way.  Case insensitive per the spec.
+      // So convert them now, also "-"  ->  "_".
+t("HEADERS");
+      char **envp = environ;
+      for ( ; *envp != NULL; envp++)
+      {
+        char *k = xstrdup(*envp);
+        char *v = strchr(k, '=');
+
+        if (NULL != v)
+        {
+          *v = '\0';
+          char *ky = qstrreplace("tr", qstrupper(k), "-", "_");
+          Rd->headers->putstr(Rd->headers, ky, v + 1);
+if ((strcmp("HTTP_COOKIE", ky) == 0) || (strcmp("CONTENT_LENGTH", ky) == 0) || (strcmp("QUERY_STRING", ky) == 0))
+  d("  %s = %s", ky, v + 1);
+        }
+        free(k);
+      }
+
+      // The FCGI paramaters sent from the server, are converted to environment variablse for the fcgi2 SDK.
+      // The FCGI spec doesn't mention what these are. except FCGI_WEB_SERVER_ADDRS.
+        char *Role      = Rd->headers->getstr(Rd->headers, "FCGI_ROLE", false);
+        Rd->Path        = Rd->headers->getstr(Rd->headers, "PATH_INFO", false);
+//      if (NULL == Rd->Path)   {msleep(1000); continue;}
+        char *Length    = Rd->headers->getstr(Rd->headers, "CONTENT_LENGTH", false);
+//char *Type    = Rd->headers->getstr(Rd->headers, "CONTENT_TYPE", false);
+        Rd->Method      = Rd->headers->getstr(Rd->headers, "REQUEST_METHOD", false);
+        Rd->Script      = Rd->headers->getstr(Rd->headers, "SCRIPT_NAME", false);
+        Rd->Scheme      = Rd->headers->getstr(Rd->headers, "REQUEST_SCHEME", false);
+        Rd->Host        = Rd->headers->getstr(Rd->headers, "HTTP_HOST", false);
+//char *SUri    = Rd->headers->getstr(Rd->headers, "SCRIPT_URI", false);
+        Rd->RUri        = Rd->headers->getstr(Rd->headers, "REQUEST_URI", true);
+//char *Cookies = Rd->headers->getstr(Rd->headers, "HTTP_COOKIE", false);
+//char *Referer = Rd->headers->getstr(Rd->headers, "HTTP_REFERER", false);
+//char *RAddr   = Rd->headers->getstr(Rd->headers, "REMOTE_ADDR", false);
+//char *Cache   = Rd->headers->getstr(Rd->headers, "HTTP_CACHE_CONTROL", false);
+//char *FAddrs  = Rd->headers->getstr(Rd->headers, "FCGI_WEB_SERVER_ADDRS", false);
+//char *Since   = Rd->headers->getstr(Rd->headers, "IF_MODIFIED_SINCE", false);
+        /* Per the spec CGI https://www.ietf.org/rfc/rfc3875
+   meta-variable-name = "AUTH_TYPE" | "CONTENT_LENGTH" |
+                           "CONTENT_TYPE" | "GATEWAY_INTERFACE" |
+                           "PATH_INFO" | "PATH_TRANSLATED" |
+                           "QUERY_STRING" | "REMOTE_ADDR" |
+                           "REMOTE_HOST" | "REMOTE_IDENT" |
+                           "REMOTE_USER" | "REQUEST_METHOD" |
+                           "SCRIPT_NAME" | "SERVER_NAME" |
+                           "SERVER_PORT" | "SERVER_PROTOCOL" |
+                           "SERVER_SOFTWARE"
+    Also protocol / scheme specific ones - 
+        HTTP_*  comes from some of the request header.  The rest are likely part of the other env variables.
+                Also covers HTTPS headers, with the HTTP_* names.
+
+        */
+
+t("COOKIES");
+        Rd->cookies = toknize(Rd->headers->getstr(Rd->headers, "HTTP_COOKIE", false), "=;");
+        santize(Rd->cookies);
+        if (strcmp("GET", Rd->Method) == 0)
+        {  // In theory a POST has body fields INSTEAD of query fields.  Especially for ignoring the linky-hashish after the validation page.
+t("QUERY");
+          Rd->queries = toknize(Rd->headers->getstr(Rd->headers, "QUERY_STRING", false),   "=&");
+          santize(Rd->queries);
+        }
+        else
+        {
+T("ignoring QUERY");
+          Rd->queries = qhashtbl(0, 0);
+          free(Rd->RUri);
+          Rd->RUri = xmprintf("%s%s", Rd->Script, Rd->Path);
+        }
+t("BODY");
+        char *Body      = NULL;
+        if (Length != NULL)
+        {
+          size_t len = strtol(Length, NULL, 10);
+          Body = xmalloc(len + 1);
+          int c = FCGI_fread(Body, 1, len, FCGI_stdin);
+          if (c != len)
+          {
+            E("Tried to read %d of the body, only got %d!", len, c);
+          }
+          Body[len] = '\0';
+        }
+        else
+        Length = "0";
+        Rd->body = toknize(Body,   "=&");
+        free(Body);
+        santize(Rd->body);
+
+        I("%s %s://%s%s -> %s%s", Rd->Method, Rd->Scheme, Rd->Host, Rd->RUri, webRoot, Rd->Path);
+        D("Started FCGI web request ROLE = %s, body is %s bytes, pid %d.", Role, Length, getpid());
+
+        if (NULL == Rd->Path)
+        {
+          E("NULL path in FCGI request!");
+          Rd->Rheaders->putstr(Rd->Rheaders, "Status", "404 Not Found");
+          goto sendReply;
+        }
+
+/* TODO - other headers may include -
+            different Content-type
+            Status: 304 Not Modified
+            Last-Modified: timedatemumble
+    https://en.wikipedia.org/wiki/List_of_HTTP_header_fields
+*/
+        Rd->Rheaders->putstr(Rd->Rheaders, "Status", "200 OK");
+        Rd->Rheaders->putstr(Rd->Rheaders, "Content-type", "text/html");
+// TODO - check these.
+        // This is all dynamic web pages, and likeley secure to.
+        // Most of these are from https://www.smashingmagazine.com/2017/04/secure-web-app-http-headers/
+        // https://www.twilio.com/blog/a-http-headers-for-the-responsible-developer is good to, and includes useful compression and image stuff.
+        // On the other hand, .css files are referenced, which might be better off being cached, so should tweak some of thees.
+        Rd->Rheaders->putstr(Rd->Rheaders, "Cache-Control", "no-cache, no-store, must-revalidate");
+        Rd->Rheaders->putstr(Rd->Rheaders, "Pragma", "no-cache");
+        Rd->Rheaders->putstr(Rd->Rheaders, "Expires", "-1");
+        Rd->Rheaders->putstr(Rd->Rheaders, "Strict-Transport-Security", "max-age=63072000");    // Two years.
+// TODO - do something about this -
+        /* https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/style-src
+            "Note: Disallowing inline styles and inline scripts is one of
+            the biggest security wins CSP provides. However, if you
+            absolutely have to use it, there are a few mechanisms that
+            will allow them."
+
+            WTF?  And the mechanisms include nonces, hashes, or 'unsafe-inline'.
+            Not sure why inline styles need to be that secure, when downloaded ones are not.
+            Ah, it's for user input that is sent back to other users, they might include funky CSS in their input.
+            SOOOO, proper validation and escaping is needed.
+            OOOOR, use the nonce, and make it a different nonce per page serve.
+            OOOOR, just put all the style stuff in a .css file.  Then we can use style-src 'self' without the 'unsafe-inline'?
+                There's only one block of <style in the header I think.
+        */
+        // Content-Security-Policy can get complex, and I first wrote that when it was very simple.  lol
+        if ('\0' != webIframers[0])
+          Rd->Rheaders->putstrf(Rd->Rheaders, "Content-Security-Policy", 
+            "default-src 'self'; script-src 'none'; form-action 'self'; style-src 'self' 'unsafe-inline'; frame-ancestors 'self' %s", webIframers);
+        else
+        {
+          Rd->Rheaders->putstr(Rd->Rheaders, "Content-Security-Policy", "default-src 'self'; script-src 'none'; form-action 'self'; style-src 'self' 'unsafe-inline'");
+          Rd->Rheaders->putstr(Rd->Rheaders, "X-Frame-Options", "SAMEORIGIN");  // This is deprecated, and is an all or nothing thing.
+        }
+        Rd->Rheaders->putstr(Rd->Rheaders, "X-XSS-Protection", "1;mode=block");
+        Rd->Rheaders->putstr(Rd->Rheaders, "X-Content-Type-Options", "nosniff");
+// Failed experiment, looks like JavaScript is the only way to change headers for the session ID.
+//      Rd->Rheaders->putstr(Rd->Rheaders, "X-Toke-N-Munchie", "foo, bar");
+
+        if ((strcmp("GET", Rd->Method) != 0) && (strcmp("HEAD", Rd->Method) != 0) && (strcmp("POST", Rd->Method) != 0))
+        {
+          E("Unsupported HTTP method %s", Rd->Method);
+          Rd->Rheaders->putstr(Rd->Rheaders, "Status", "405 Method Not Allowed");
+          goto sendReply;
+        }
+
+        memset(toybuf, 0, sizeof(toybuf));
+        snprintf(toybuf, sizeof(toybuf), "%s%s", webRoot, Rd->Path);
+        HTMLfile *thisFile = checkHTMLcache(toybuf);
+        if (NULL == thisFile)
+        {
+          dynPage *dp = dynPages->get(dynPages, &Rd->Path[1], NULL, false);
+          if (NULL == dp)
+          {
+            E("Can't access file %s", toybuf);
+            Rd->Rheaders->putstr(Rd->Rheaders, "Status", "404 Not Found");
+            E("Failed to open %s, it's not a virtual file either", toybuf);
+            goto sendReply;
+          }
+          dp->func(toybuf, Rd, thisFile);
+          char *finl = Rd->reply->tostring(Rd->reply);  // This mallocs new storage and returns it to us.
+// TODO - maybe cache this?
+          qlist_t *fragments = fragize(finl, Rd->reply->datasize(Rd->reply));
+          Rd->reply->free(Rd->reply);
+          Rd->reply = qgrow(QGROW_THREADSAFE);
+          unfragize(fragments, Rd, TRUE);
+          free(finl);
+goto sendReply;
+        }
+
+        tmp0 = qfile_get_ext(toybuf);
+        tmp1 = mimeTypes->getstr(mimeTypes, tmp0, false);
+        free(tmp0);
+        if (NULL != tmp1)
+        {
+          if (strncmp("text/", tmp1, 5) != 0)
+          {
+            E("Only text formats are supported - %s", toybuf);
+            Rd->Rheaders->putstr(Rd->Rheaders, "Status", "415 Unsupported Media Type");
+            goto sendReply;
+          }
+        }
+        else
+        {
+          E("Not actually a teapot, er I mean file has no extension, can't determine media type the easy way - %s", toybuf);
+          Rd->Rheaders->putstr(Rd->Rheaders, "Status", "418 I'm a teapot");
+          goto sendReply;
+        }
+
+//      Rd->Rheaders->putstr(Rd->Rheaders, "Last-Modified", thisFile->last.tv_sec);
+//      This is dynamic content, it's always gonna be modified.  I think.
+//      if (NULL != Since)
+//      {
+//        time_t snc = qtime_parse_gmtstr(Since);
+// TODO - should validate the time, log and ignore it if not valid.
+//        if (thisFile->last.tv_sec < snc)
+//        {
+//          D("Status: 304 Not Modified - %s", toybuf);
+//          setHeader("Status", "304 Not Modified");
+//          goto sendReply;
+//        }
+//      }
+
+        if (strcmp("HEAD", Rd->Method) == 0)
+            goto sendReply;
+
+        getStats(database, stats);
+        unfragize(thisFile->fragments, Rd, FALSE);
+        free(thisFile);
+
+sendReply:
+        /* Send headers.
+           BTW, the Status header should be sent first I think.
+              https://www.ietf.org/rfc/rfc3875 6.2 says order isn't important.
+                It even says Status is optional, 200 is assumed.  Content-Type is mandatory.
+                8.2 "Recommendations for Scripts" is worth complying with.
+                9  "Security Considerations"
+              https://tools.ietf.org/html/rfc7230 3.1.2 says status line must be first.  lol
+        */
+        FCGI_printf("Status: %s\r\n", getStrH(Rd->Rheaders, "Status"));
+        memset((void *) &hobj, 0, sizeof(hobj));
+        Rd->Rheaders->lock(Rd->Rheaders);
+        while (Rd->Rheaders->getnext(Rd->Rheaders, &hobj, false) == true)
+        {
+          if (strcmp("Status", (char *) hobj.name) != 0)
+            FCGI_printf("%s: %s\r\n", (char *) hobj.name, (char *) hobj.data);
+        }
+        Rd->Rheaders->unlock(Rd->Rheaders);
+        // Send cookies.
+        memset((void *) &hobj, 0, sizeof(hobj));
+        Rd->Rcookies->lock(Rd->Rcookies);
+        while (Rd->Rcookies->getnext(Rd->Rcookies, &hobj, false) == true)
+        {
+          cookie *ck = (cookie *) hobj.data;
+          FCGI_printf("Set-Cookie: %s=%s", hobj.name, ck->value);
+//        if (NULL      != ck->expires)         FCGI_printf("; Expires=%s", ck->expires);
+          if (NULL      != ck->domain)          FCGI_printf("; Domain=%s", ck->domain);
+          if (NULL      != ck->path)            FCGI_printf("; Path=%s", ck->path);
+          if (0         != ck->maxAge)          FCGI_printf("; Max-Age=%d", ck->maxAge);
+          if (             ck->secure)          FCGI_printf("; Secure");
+          if (             ck->httpOnly)        FCGI_printf("; HttpOnly");
+          if (CS_STRICT == ck->site)            FCGI_printf("; SameSite=Strict");
+          if (CS_LAX    == ck->site)            FCGI_printf("; SameSite=Lax");
+          if (CS_NONE   == ck->site)            FCGI_printf("; SameSite=None");
+          FCGI_printf("\r\n");
+          free(ck->value);
+          ck->value = NULL;
+        }
+        FCGI_printf("\r\n");
+        Rd->cookies->unlock(Rd->cookies);
+        // Send body.
+        char *final = Rd->reply->tostring(Rd->reply);
+        if (NULL == final)
+        {
+          tmp0 = Rd->Rheaders->getstr(Rd->Rheaders, "Status", false);
+          if (NULL == tmp0)
+          {
+            E("Some sort of error happpened!  Status: UNKNOWN!!");
+            FCGI_printf("Some sort of error happpened!  Status: UNKNOWN!!");
+          }
+          else
+          {
+            E("Some sort of error happpened!  Status: %s", tmp0);
+            FCGI_printf("Some sort of error happpened!  Status: %s", tmp0);
+          }
+        }
+        else
+        {
+          FCGI_printf("%s", final);
+          free(final);
+        }
+
+fcgiDone:
+        FCGI_Finish();
+        if (NULL != Rd->outQuery)       free(Rd->outQuery);
+        if (NULL != Rd->shs.name)       free(Rd->shs.name);
+        Rd->shs.name = NULL;
+        if (NULL != Rd->shs.UUID)       free(Rd->shs.UUID);
+        Rd->shs.UUID = NULL;
+        qgrow_free(Rd->reply);
+        qlist_free(Rd->messages);
+        qlist_free(Rd->errors);
+        qhashtbl_free(Rd->Rheaders);
+        qhashtbl_free(Rd->Rcookies);
+        qhashtbl_free(Rd->database);
+        qhashtbl_free(Rd->stuff);
+        qhashtbl_free(Rd->valid);
+        qhashtbl_free(Rd->headers);
+        qhashtbl_free(Rd->cookies);
+        qhashtbl_free(Rd->body);
+        qhashtbl_free(Rd->queries);
+        if (Rd->lnk)    free(Rd->lnk);
+        free(Rd->RUri);
+
+        struct timespec now;
+        if (-1 == clock_gettime(CLOCK_REALTIME, &now))
+          perror_msg("Unable to get the time.");
+        double n = (now.tv_sec * 1000000000.0) + now.tv_nsec;
+        double t = (Rd->then.tv_sec * 1000000000.0) + Rd->then.tv_nsec;
+        I("Finished web request, took %lf seconds", (n - t) / 1000000000.0);
+        free(Rd);
+    }
+
+    FCGI_fprintf(FCGI_stderr, "Stopped SledjChisl web server.\n");
+    D("Stopped SledjChisl web server.");
+
+    goto finished;
+  }
+
+
+  if (!isTmux)
+  {     // Let's see if the proper tmux server is even running.
+    memset(toybuf, 0, sizeof(toybuf));
+    snprintf(toybuf, sizeof(toybuf), "%s %s/%s -q list-sessions 2>/dev/null | grep -q %s:", Tcmd, scRun, Tsocket, Tconsole);
+    i = system(toybuf);
+    if (WIFEXITED(i))
+    {
+      if (0 != WEXITSTATUS(i))  // No such sesion, create it.
+      {
+        memset(toybuf, 0, sizeof(toybuf));
+        // The sudo is only so that the session is owned by opensim, otherwise it's owned by whoever ran this script, which is a likely security hole.
+        // After the session is created, we rely on the scRun directory to be group sticky, so that anyone in the opensim group can attach to the tmux socket.
+        snprintf(toybuf, sizeof(toybuf), 
+          "sudo -Hu %s %s %s/%s new-session -d -s %s  -n '%s' \\; split-window -bhp 50 -t '%s:' bash -c '/usr/bin/valgrind --leak-check=full ./sledjchisl; cd %s; bash'",
+          scUser, Tcmd, scRun, Tsocket, Tconsole, Ttab, Tconsole, scRoot);
+        i = system(toybuf);
+        if (!WIFEXITED(i))
+          E("tmux new-session command failed!  %s", toybuf);
+      }
+      // Join the session.
+      memset(toybuf, 0, sizeof(toybuf));
+      snprintf(toybuf, sizeof(toybuf), "%s %s/%s select-window -t '%s' \\; attach-session -t '%s'", Tcmd, scRun, Tsocket, Tconsole, Tconsole);
+      i = system(toybuf);
+      if (!WIFEXITED(i))
+        E("tmux attach-session command failed!  %s", toybuf);
+      goto finished;
+    }
+    else
+      E("tmux list-sessions command failed!  %s", toybuf);
+  }
+
+
+  simList *sims = getSims();
+  if (1)
+  {
+    struct sysinfo info;
+    float  la;
+
+    sysinfo(&info);
+    la = info.loads[0]/65536.0;
+
+    if (!checkSimIsRunning("ROBUST"))
+    {
+      char *d = xmprintf("%s.{right}", Ttab);
+      char *c = xmprintf("cd %s/current/bin", scRoot);
+
+      I("ROBUST is starting up.");
+      sendTmuxCmd(d, c);
+      free(c);
+      c = xmprintf("mono Robust.exe -inidirectory=%s/config/ROBUST", scRoot);
+      sendTmuxCmd(d, c);
+      free(c);
+      waitTmuxText(d, "INITIALIZATION COMPLETE FOR ROBUST");
+      I("ROBUST is done starting up.");
+      la = waitLoadAverage(la, loadAverageInc / 3.0, simTimeOut / 3);
+      free(d);
+    }
+
+    for (i = 0; i < sims->num; i++)
+    {
+      char *sim = sims->sims[i], *name = getSimName(sims->sims[i]);
+
+      if (!checkSimIsRunning(sim))
+      {
+        char *nm = cleanSimName(name);
+
+        I("%s is starting up.", name);
+        memset(toybuf, 0, sizeof(toybuf));
+        snprintf(toybuf, sizeof(toybuf), "%s %s/%s new-window -dn '%s' -t '%s:%d' 'cd %s/current/bin; mono OpenSim.exe -inidirectory=%s/config/%s'",
+          Tcmd, scRun, Tsocket, nm, Tconsole, i + 1, scRoot, scRoot, sim);
+        int r = system(toybuf);
+        if (!WIFEXITED(r))
+          E("tmux new-window command failed!");
+        else
+        {
+          memset(toybuf, 0, sizeof(toybuf));
+          snprintf(toybuf, sizeof(toybuf), "INITIALIZATION COMPLETE FOR %s", name);
+          waitTmuxText(nm, toybuf);
+          I("%s is done starting up.", name);
+          la = waitLoadAverage(la, loadAverageInc, simTimeOut);
+        }
+        free(nm);
+      }
+      free(name);
+    }
+
+  }
+  else if (!strcmp(cmd, "create"))      // "create name x,y size"
+  {
+  }
+  else if (!strcmp(cmd, "start"))       // "start sim01"  "start Welcome"  "start" start everything
+  {
+// TODO - check if sim is down, but tmux window is still up, and close the tmux window first.
+  }
+  else if (!strcmp(cmd, "backup"))      // "backup onefang rejected"  "backup sim01"  "backup Welcome"  "backup" backup everything
+  {                                     // If it's not a sim code, and not a sim name, it's an account inventory.
+  }
+  else if (!strcmp(cmd, "gitAR"))       // "gitAR i name"
+  {
+  }
+  else if (!strcmp(cmd, "stop"))        // "stop sim01"  "stop Welcome"  "stop" stop everything
+  {
+  }
+
+  freeSimList(sims);
+
+/*
+  double sum;
+
+  // Load the file containing the script we are going to run
+  status = luaL_loadfile(L, "script.lua");
+  if (status)
+  {
+    // If something went wrong, error message is at the top of the stack
+    E("Couldn't load file: %s", lua_tostring(L, -1));
+    goto finished;
+  }
+*/
+
+  /*
+   * Ok, now here we go: We pass data to the lua script on the stack.
+   * That is, we first have to prepare Lua's virtual stack the way we
+   * want the script to receive it, then ask Lua to run it.
+   */
+//  lua_newtable(L);    /* We will pass a table */
+
+  /*
+   * To put values into the table, we first push the index, then the
+   * value, and then call lua_rawset() with the index of the table in the
+   * stack. Let's see why it's -3: In Lua, the value -1 always refers to
+   * the top of the stack. When you create the table with lua_newtable(),
+   * the table gets pushed into the top of the stack. When you push the
+   * index and then the cell value, the stack looks like:
+   *
+   * <- [stack bottom] -- table, index, value [top]
+   *
+   * So the -1 will refer to the cell value, thus -3 is used to refer to
+   * the table itself. Note that lua_rawset() pops the two last elements
+   * of the stack, so that after it has been called, the table is at the
+   * top of the stack.
+   */
+/*
+  for (i = 1; i <= 5; i++)
+  {
+    lua_pushnumber(L, i);   // Push the table index
+    lua_pushnumber(L, i*2); // Push the cell value
+    lua_rawset(L, -3);      // Stores the pair in the table
+  }
+
+  // By what name is the script going to reference our table?
+  lua_setglobal(L, "foo");
+
+  // Ask Lua to run our little script
+  result = lua_pcall(L, 0, LUA_MULTRET, 0);
+  if (result)
+  {
+    E("Failed to run script: %s", lua_tostring(L, -1));
+    goto finished;
+  }
+
+  // Get the returned value at the top of the stack (index -1)
+  sum = lua_tonumber(L, -1);
+
+  I("Script returned: %.0f", sum);
+
+  lua_pop(L, 1);  // Take the returned value out of the stack
+*/
+
+finished:
+
+  // An example of calling a toy directly.
+//  printf("\n\n");
+//  char *argv[] = {"ls", "-l", "-a", NULL};
+//  printf("%d\n", runToy(argv));
+
+
+  puts("This is the end my friend.");
+  fflush(stdout);
+
+  cleanup();
+}
diff --git a/src/tickle.lua b/src/tickle.lua
new file mode 100755
index 0000000..fc89237
--- /dev/null
+++ b/src/tickle.lua
@@ -0,0 +1,26 @@
+#!/usr/bin/env luajit
+
+-- Grab the stats web page, just to ping the database server, coz sledjchisl isn't event driven yet.
+
+local paths =
+{
+  ".sledjChisl.conf.lua",
+  "/etc/sledjChisl.conf.lua",
+--  "/etc/sledjChisl.d/*.lua",
+  "~/.sledjChisl.conf.lua",
+--  "~/.config/sledjChisl/*.lua",
+}
+
+local config = {}
+
+for k, v in ipairs(paths) do
+    local cfg = loadfile(v)
+    if nil ~= cfg then
+        cfg = cfg()
+        for k, w in pairs(cfg) do
+            config[k] = w
+        end
+    end
+end
+
+os.execute("curl -so /dev/null http://" .. config.webHost ..  "/" .. config.URL .. "/stats.html")