Improve HTML escaping
[squirrelmail.git] / src / folders.php
... / ...
CommitLineData
1<?php
2
3/**
4 * folders.php
5 *
6 * Copyright (c) 1999-2004 The SquirrelMail Project Team
7 * Licensed under the GNU GPL. For full terms see the file COPYING.
8 *
9 * Handles all interaction between the user and the other folder
10 * scripts which do most of the work. Also handles the Special
11 * Folders.
12 *
13 * @version $Id$
14 * @package squirrelmail
15 */
16
17/**
18 * Path for SquirrelMail required files.
19 * @ignore
20 */
21define('SM_PATH','../');
22
23/* SquirrelMail required files. */
24require_once(SM_PATH . 'include/validate.php');
25require_once(SM_PATH . 'functions/imap.php');
26require_once(SM_PATH . 'functions/plugin.php');
27require_once(SM_PATH . 'functions/html.php');
28require_once(SM_PATH . 'functions/forms.php');
29
30displayPageHeader($color, 'None');
31
32/* get globals we may need */
33
34sqgetGlobalVar('username', $username, SQ_SESSION);
35sqgetGlobalVar('key', $key, SQ_COOKIE);
36sqgetGlobalVar('delimiter', $delimiter, SQ_SESSION);
37sqgetGlobalVar('onetimepad', $onetimepad, SQ_SESSION);
38
39sqgetGlobalVar('success', $success, SQ_GET);
40
41/* end of get globals */
42
43echo '<br>' .
44 html_tag( 'table', '', 'center', $color[0], 'width="95%" cellpadding="1" cellspacing="0" border="0"' ) .
45 html_tag( 'tr' ) .
46 html_tag( 'td', '', 'center' ) . '<b>' . _("Folders") . '</b>' .
47 html_tag( 'table', '', 'center', '', 'width="100%" cellpadding="5" cellspacing="0" border="0"' ) .
48 html_tag( 'tr' ) .
49 html_tag( 'td', '', 'center', $color[4] );
50
51if ( isset($success) && $success ) {
52
53 $td_str = '<b>';
54
55 switch ($success)
56 {
57 case 'subscribe':
58 $td_str .= _("Subscribed successfully!");
59 break;
60 case 'unsubscribe':
61 $td_str .= _("Unsubscribed successfully!");
62 break;
63 case 'delete':
64 $td_str .= _("Deleted folder successfully!");
65 break;
66 case 'create':
67 $td_str .= _("Created folder successfully!");
68 break;
69 case 'rename':
70 $td_str .= _("Renamed successfully!");
71 break;
72 case 'subscribe-doesnotexist':
73 $td_str .= _("Subscription Unsuccessful - Folder does not exist.");
74 break;
75 }
76
77 $td_str .= '</b><br>';
78
79
80 echo html_tag( 'table',
81 html_tag( 'tr',
82 html_tag( 'td', $td_str .
83 '<a href="../src/left_main.php" target=left>' .
84 _("refresh folder list") . '</a>' ,
85 'center' )
86 ) ,
87 'center', '', 'width="100%" cellpadding="4" cellspacing="0" border="0"' );
88}
89
90echo "\n<br>";
91
92$imapConnection = sqimap_login ($username, $key, $imapServerAddress, $imapPort, 0);
93$boxes = sqimap_mailbox_list($imapConnection);
94
95/** CREATING FOLDERS **/
96echo html_tag( 'table', '', 'center', '', 'width="70%" cellpadding="4" cellspacing="0" border="0"' ) .
97 html_tag( 'tr',
98 html_tag( 'td', '<b>' . _("Create Folder") . '</b>', 'center', $color[9] )
99 ) .
100 html_tag( 'tr' ) .
101 html_tag( 'td', '', 'center', $color[0] ) .
102 addForm('folders_create.php', 'POST', 'cf').
103 addInput('folder_name', '', 25).
104 "<BR>\n". _("as a subfolder of"). '<BR>'.
105 "<TT><SELECT NAME=subfolder>\n";
106
107$show_selected = array();
108$skip_folders = array();
109$server_type = strtolower($imap_server_type);
110if ( $server_type == 'courier' ) {
111 array_push($skip_folders, 'inbox.trash');
112 if ( $default_folder_prefix == 'INBOX.' ) {
113 array_push($skip_folders, 'inbox');
114 }
115}
116
117if ( $default_sub_of_inbox == false ) {
118 echo '<OPTION SELECTED VALUE="">[ '._("None")." ]\n";
119} else {
120 echo '<OPTION VALUE="">[ '._("None")." ]\n";
121 $show_selected = array('inbox');
122}
123
124// Call sqimap_mailbox_option_list, using existing connection to IMAP server,
125// the arrays of folders to include or skip (assembled above),
126// use 'noinferiors' as a mailbox filter to leave out folders that can not contain other folders.
127// use the long format to show subfolders in an intelligible way if parent is missing (special folder)
128echo sqimap_mailbox_option_list($imapConnection, $show_selected, $skip_folders, $boxes, 'noinferiors', true);
129
130echo "</SELECT></TT>\n";
131if ($show_contain_subfolders_option) {
132 echo '<br>'.
133 addCheckBox('contain_subs', FALSE, '1') .' &nbsp;'
134 . _("Let this folder contain subfolders")
135 . '<BR>';
136}
137echo "<input type=SUBMIT VALUE=\""._("Create")."\">\n";
138echo "</FORM></td></tr>\n";
139
140echo html_tag( 'tr',
141 html_tag( 'td', '&nbsp;', 'left', $color[4] )
142 ) ."\n";
143
144/** count special folders **/
145
146// FIX ME, why not check if the folders are defined IMHO move_to_sent, move_to_trash has nothing todo with it
147$count_special_folders = 0;
148$num_max = 1;
149if (strtolower($imap_server_type) == "courier" || $move_to_trash) {
150 $num_max++;
151}
152if ($move_to_sent) {
153 $num_max++;
154}
155if ($save_as_draft) {
156 $num_max++;
157}
158
159// What if move_to_sent = false and $sent_folder is set? Should it still be skipped?
160
161for ($p = 0, $cnt = count($boxes); $p < $cnt && $count_special_folders < $num_max; $p++) {
162 switch ($boxes[$p]['unformatted'])
163 {
164 case (strtoupper($boxes[$p]['unformatted']) == 'INBOX'):
165 ++$count_special_folders;
166 $skip_folders[] = $boxes[$p]['unformatted'];
167 break;
168 // FIX ME inbox.trash should be set in conf.pl
169 case 'inbox.trash':
170 if (strtolower($imap_server_type) == 'courier') {
171 ++$count_special_folders;
172 }
173 break;
174 case $trash_folder:
175 ++$count_special_folders;
176 $skip_folders[] = $trash_folder;
177 break;
178 case $sent_folder:
179 ++$count_special_folders;
180 $skip_folders[] = $sent_folder;
181 break;
182 case $draft_folder:
183 ++$count_special_folders;
184 $skip_folders[] = $draft_folder;
185 break;
186 default: break;
187 }
188}
189
190
191/** RENAMING FOLDERS **/
192echo html_tag( 'tr',
193 html_tag( 'td', '<b>' . _("Rename a Folder") . '</b>', 'center', $color[9] )
194 ) .
195 html_tag( 'tr' ) .
196 html_tag( 'td', '', 'center', $color[0] );
197
198if ($count_special_folders < count($boxes)) {
199 echo addForm('folders_rename_getname.php')
200 . "<TT><SELECT NAME=old>\n"
201 . ' <OPTION VALUE="">[ ' . _("Select a folder") . " ]</OPTION>\n";
202
203 // use existing IMAP connection, we have no special values to show,
204 // but we do include values to skip. Use the pre-created $boxes to save an IMAP query.
205 // send NULL for the flag - ALL folders are eligible for rename!
206 // use long format to make sure folder names make sense when parents may be missing.
207 echo sqimap_mailbox_option_list($imapConnection, 0, $skip_folders, $boxes, NULL, true);
208
209 echo "</SELECT></TT>\n".
210 "<input type=SUBMIT VALUE=\"".
211 _("Rename").
212 "\">\n".
213 "</FORM></td></tr>\n";
214} else {
215 echo _("No folders found") . '<br><br></td></tr>';
216}
217$boxes_sub = $boxes;
218
219echo html_tag( 'tr',
220 html_tag( 'td', '&nbsp;', 'left', $color[4] )
221 ) ."\n";
222
223/** DELETING FOLDERS **/
224echo html_tag( 'tr',
225 html_tag( 'td', '<b>' . _("Delete Folder") . '</b>', 'center', $color[9] )
226 ) .
227 html_tag( 'tr' ) .
228 html_tag( 'td', '', 'center', $color[0] );
229
230if ($count_special_folders < count($boxes)) {
231 echo addForm('folders_delete.php')
232 . "<TT><SELECT NAME=mailbox>\n"
233 . ' <OPTION VALUE="">[ ' . _("Select a folder") . " ]</OPTION>\n";
234
235 // send NULL for the flag - ALL folders are eligible for delete (except what we've got in skiplist)
236 // use long format to make sure folder names make sense when parents may be missing.
237 echo sqimap_mailbox_option_list($imapConnection, 0, $skip_folders, $boxes, NULL, true);
238
239 echo "</SELECT></TT>\n"
240 . '<input type=SUBMIT VALUE="'
241 . _("Delete")
242 . "\">\n"
243 . "</form></td></tr>\n";
244} else {
245 echo _("No folders found") . "<br><br></td></tr>";
246}
247
248echo html_tag( 'tr',
249 html_tag( 'td', '&nbsp;', 'left', $color[4] )
250 ) ."</table>\n";
251
252
253/** UNSUBSCRIBE FOLDERS **/
254echo html_tag( 'table', '', 'center', '', 'width="70%" cellpadding="4" cellspacing="0" border="0"' ) .
255 html_tag( 'tr',
256 html_tag( 'td', '<b>' . _("Unsubscribe") . '/' . _("Subscribe") . '</b>', 'center', $color[9], 'colspan="2"' )
257 ) .
258 html_tag( 'tr' ) .
259 html_tag( 'td', '', 'center', $color[0], 'width="50%"' );
260
261if ($count_special_folders < count($boxes)) {
262 echo addForm('folders_subscribe.php?method=unsub')
263 . "<TT><SELECT NAME=\"mailbox[]\" multiple size=8>\n";
264 for ($i = 0; $i < count($boxes); $i++) {
265 $use_folder = true;
266 if ((strtolower($boxes[$i]["unformatted"]) != "inbox") &&
267 ($boxes[$i]["unformatted"] != $trash_folder) &&
268 ($boxes[$i]["unformatted"] != $sent_folder) &&
269 ($boxes[$i]["unformatted"] != $draft_folder)) {
270 $box = htmlspecialchars($boxes[$i]["unformatted-dm"]);
271 $box2 = str_replace(' ', '&nbsp;',
272 htmlspecialchars(imap_utf7_decode_local($boxes[$i]["unformatted-disp"])));
273 echo " <OPTION VALUE=\"$box\">$box2\n";
274 }
275 }
276 echo "</SELECT></TT><br><br>\n"
277 . '<input type=SUBMIT VALUE="'
278 . _("Unsubscribe")
279 . "\">\n"
280 . "</FORM></td>\n";
281} else {
282 echo _("No folders were found to unsubscribe from!") . '</td>';
283}
284$boxes_sub = $boxes;
285
286/** SUBSCRIBE TO FOLDERS **/
287echo html_tag( 'td', '', 'center', $color[0], 'width="50%"' );
288if(!$no_list_for_subscribe) {
289 $boxes_all = sqimap_mailbox_list_all ($imapConnection);
290
291 $box = '';
292 $box2 = '';
293 for ($i = 0, $q = 0; $i < count($boxes_all); $i++) {
294 $use_folder = true;
295 for ($p = 0; $p < count ($boxes); $p++) {
296 if ($boxes_all[$i]['unformatted'] == $boxes[$p]['unformatted']) {
297 $use_folder = false;
298 continue;
299 } else if ($boxes_all[$i]['unformatted-dm'] == $folder_prefix) {
300 $use_folder = false;
301 }
302 }
303 if ($use_folder == true) {
304 $box[$q] = htmlspecialchars($boxes_all[$i]['unformatted-dm']);
305 $box2[$q] = htmlspecialchars(imap_utf7_decode_local($boxes_all[$i]['unformatted-disp']));
306 $q++;
307 }
308 }
309 if ($box && $box2) {
310 echo addForm('folders_subscribe.php?method=sub')
311 . '<tt><select name="mailbox[]" multiple size=8>';
312
313 for ($q = 0; $q < count($box); $q++) {
314 echo " <OPTION VALUE=\"$box[$q]\">".$box2[$q]."\n";
315 }
316 echo '</select></tt><br><br>'
317 . '<input type=SUBMIT VALUE="'. _("Subscribe") . "\">\n"
318 . "</FORM></td></tr></table><BR>\n";
319 } else {
320 echo _("No folders were found to subscribe to!") . '</td></tr></table>';
321 }
322} else {
323 /* don't perform the list action -- this is much faster */
324 echo addForm('folders_subscribe.php?method=sub')
325 . _("Subscribe to:") . '<br>'
326 . '<tt><input type="text" name="mailbox[]" size=35>'
327 . '<INPUT TYPE=SUBMIT VALUE="'. _("Subscribe") . "\">\n"
328 . "</FORM></TD></TR></TABLE><BR>\n";
329}
330
331do_hook('folders_bottom');
332?>
333
334 </td></tr>
335 </table>
336
337</td></tr>
338</table>
339
340<?php
341 sqimap_logout($imapConnection);
342?>
343
344</body></html>