src/compose.php

   1 <?php
   2    /**
   3     ** compose.php
   4     **
   5     **  Copyright (c) 1999-2000 The SquirrelMail development team
   6     **  Licensed under the GNU GPL. For full terms see the file COPYING.
   7     **
   8     ** This code sends a mail.
   9     **
  10     ** There are 3 modes of operation:
  11     **  - Start new mail
  12     **  - Add an attachment
  13     **  - Send mail
  14     **/
  15
  16    session_start();
  17
  18    if (!isset($config_php))
  19       include("../config/config.php");
  20    if (!isset($strings_php))
  21       include("../functions/strings.php");
  22    if (!isset($page_header_php))
  23       include("../functions/page_header.php");
  24    if (!isset($imap_php))
  25       include("../functions/imap.php");
  26    if (!isset($date_php))
  27       include("../functions/date.php");
  28    if (!isset($mime_php))
  29       include("../functions/mime.php");
  30    if (!isset($smtp_php))
  31       include("../functions/smtp.php");
  32    if (!isset($display_messages_php))
  33       include("../functions/display_messages.php");
  34    if (!isset($auth_php))
  35       include ("../functions/auth.php");
  36
  37    include("../src/load_prefs.php");
  38
  39    // This function is used when not sending or adding attachments
  40    function newMail () {
  41       global $forward_id, $imapConnection, $msg, $ent_num, $body_ary, $body,
  42          $reply_id, $send_to, $send_to_cc, $mailbox, $send_to_bcc;
  43
  44       $send_to = decodeHeader($send_to);
  45       $send_to_cc = decodeHeader($send_to_cc);
  46
  47       if ($forward_id)
  48          $id = $forward_id;
  49       else if ($reply_id)
  50          $id = $reply_id;
  51
  52       if ($id) {
  53          sqimap_mailbox_select($imapConnection, $mailbox);
  54          $message = sqimap_get_message($imapConnection, $id, $mailbox);
  55          $message = getEntity($message, $ent_num);
  56
  57          if ($message->header->type0 == "text" || $message->header->type1 == "message") {
  58             $body = decodeBody(mime_fetch_body($imapConnection, $id, $message->header->entity_id), $message->header->encoding);
  59          } else {
  60             $body = "";
  61          }
  62
  63          if ($forward_id)
  64             $tmp = _("-------- Original Message ---------\n");
  65          if ($message->header->type1 == "html")
  66             $body = strip_tags($body);
  67
  68          $body_ary = explode("\n", $body);
  69          $body = "";
  70          for ($i=0; $i < count($body_ary); $i++) {
  71             $tmp = $body_ary[$i];
  72
  73             if ($forward_id)
  74                $body = "$body$tmp\n";
  75             else
  76                $body = "$body> $tmp\n";
  77          }
  78
  79       }
  80
  81       if (!$send_to) {
  82          $send_to = sqimap_find_email($send_to);
  83       }
  84
  85 //      $send_to = ereg_replace("\"", "", $send_to);
  86       $send_to = stripslashes($send_to);
  87
  88       /** This formats a CC string if they hit "reply all" **/
  89       if ($send_to_cc != "") {
  90          $send_to_cc = ereg_replace(";", ",", $send_to_cc);
  91          $sendcc = explode(",", $send_to_cc);
  92          $send_to_cc = "";
  93
  94          for ($i = 0; $i < count($sendcc); $i++) {
  95             $sendcc[$i] = trim($sendcc[$i]);
  96             if ($sendcc[$i] == "")
  97                continue;
  98
  99             $sendcc[$i] = sqimap_find_email($sendcc[$i]);
 100             $whofrom = sqimap_find_displayable_name($msg["HEADER"]["FROM"]);
 101             $whoreplyto = sqimap_find_email($msg["HEADER"]["REPLYTO"]);
 102
 103             if ((strtolower(trim($sendcc[$i])) != strtolower(trim($whofrom))) &&
 104                 (strtolower(trim($sendcc[$i])) != strtolower(trim($whoreplyto))) &&
 105                 (trim($sendcc[$i]) != "")) {
 106                $send_to_cc .= trim($sendcc[$i]) . ", ";
 107             }
 108          }
 109          $send_to_cc = trim($send_to_cc);
 110          if (substr($send_to_cc, -1) == ",") {
 111             $send_to_cc = substr($send_to_cc, 0, strlen($send_to_cc) - 1);
 112          }
 113       }
 114    } // function newMail()
 115
 116    function showInputForm () {
 117       global $send_to, $send_to_cc, $reply_subj, $forward_subj, $body,
 118          $passed_body, $color, $use_signature, $signature, $editor_size,
 119          $attachments, $subject, $newmail, $use_javascript_addr_book,
 120          $send_to_bcc, $reply_id, $mailbox;
 121
 122       $subject = decodeHeader($subject);
 123       $reply_subj = decodeHeader($reply_subj);
 124       $forward_subj = decodeHeader($forward_subj);
 125
 126       if ($use_javascript_addr_book) {
 127          echo "\n<SCRIPT LANGUAGE=JavaScript><!--\n";
 128          echo "function open_abook() { \n";
 129          echo "  var nwin = window.open(\"addrbook_popup.php\",\"abookpopup\",";
 130          echo "\"width=670,height=300,resizable=yes,scrollbars=yes\");\n";
 131          echo "  if((!nwin.opener) && (document.windows != null))\n";
 132          echo "    nwin.opener = document.windows;\n";
 133          echo "}\n";
 134          echo "// --></SCRIPT>\n\n";
 135       }
 136
 137       echo "\n<FORM name=compose action=\"compose.php\" METHOD=POST ENCTYPE=\"multipart/form-data\">\n";
 138       if ($reply_id) {
 139          echo "<input type=hidden name=reply_id value=$reply_id>\n";
 140       }
 141       printf("<INPUT TYPE=hidden NAME=mailbox VALUE=\"%s\">\n", htmlspecialchars($mailbox));
 142       echo "<TABLE WIDTH=50 ALIGN=center CELLSPACING=0 BORDER=0>\n";
 143       echo "   <TR>\n";
 144       echo "      <TD WIDTH=50 BGCOLOR=\"$color[4]\" ALIGN=RIGHT>\n";
 145       echo _("To:");
 146       echo "      </TD><TD colspan=2 WIDTH=\"100%\" BGCOLOR=\"$color[4]\" ALIGN=LEFT>\n";
 147       printf("         <INPUT TYPE=text NAME=\"send_to\" VALUE=\"%s\" SIZE=60><BR>\n",
 148              htmlspecialchars($send_to));
 149       echo "      </TD>\n";
 150       echo "   </TR>\n";
 151       echo "   <TR>\n";
 152       echo "      <TD WIDTH=50 BGCOLOR=\"$color[4]\" ALIGN=RIGHT>\n";
 153       echo _("CC:");
 154       echo "      </TD><TD colspan=2 BGCOLOR=\"$color[4]\" ALIGN=LEFT>\n";
 155       printf("         <INPUT TYPE=text NAME=\"send_to_cc\" SIZE=60 VALUE=\"%s\"><BR>\n",
 156              htmlspecialchars($send_to_cc));
 157       echo "      </TD>\n";
 158       echo "   </TR>\n";
 159       echo "   <TR>\n";
 160       echo "      <TD WIDTH=50 BGCOLOR=\"$color[4]\" ALIGN=RIGHT>\n";
 161       echo _("BCC:");
 162       echo "      </TD><TD BGCOLOR=\"$color[4]\" ALIGN=LEFT>\n";
 163       printf("         <INPUT TYPE=text NAME=\"send_to_bcc\" VALUE=\"%s\" SIZE=60><BR>\n",
 164              htmlspecialchars($send_to_bcc));
 165       echo "</TD></TR>\n";
 166
 167       echo "   <TR>\n";
 168       echo "      <TD WIDTH=50 BGCOLOR=\"$color[4]\" ALIGN=RIGHT>\n";
 169       echo _("Subject:");
 170       echo "      </TD><TD BGCOLOR=\"$color[4]\" ALIGN=LEFT>\n";
 171       if ($reply_subj) {
 172          $reply_subj = str_replace("\"", "'", $reply_subj);
 173          $reply_subj = stripslashes($reply_subj);
 174          $reply_subj = trim($reply_subj);
 175          if (substr(strtolower($reply_subj), 0, 3) != "re:")
 176             $reply_subj = "Re: $reply_subj";
 177          printf("         <INPUT TYPE=text NAME=subject SIZE=60 VALUE=\"%s\">",
 178                 htmlspecialchars($reply_subj));
 179       } else if ($forward_subj) {
 180          $forward_subj = str_replace("\"", "'", $forward_subj);
 181          $forward_subj = stripslashes($forward_subj);
 182          $forward_subj = trim($forward_subj);
 183          if ((substr(strtolower($forward_subj), 0, 4) != "fwd:") &&
 184              (substr(strtolower($forward_subj), 0, 5) != "[fwd:") &&
 185              (substr(strtolower($forward_subj), 0, 6) != "[ fwd:"))
 186             $forward_subj = "[Fwd: $forward_subj]";
 187          printf("         <INPUT TYPE=text NAME=subject SIZE=60 VALUE=\"%s\">",
 188                 htmlspecialchars($forward_subj));
 189       } else {
 190          printf("         <INPUT TYPE=text NAME=subject SIZE=60 VALUE=\"%s\">",
 191                 htmlspecialchars($subject));
 192       }
 193       echo "</td></tr>\n\n";
 194
 195       echo "   <TR><td>\n   </td><td>\n";
 196       if ($use_javascript_addr_book) {
 197          echo "      <SCRIPT LANGUAGE=JavaScript><!--\n document.write(\"";
 198          echo "         <input type=button value=\\\""._("Addresses")."\\\" onclick='javascript:open_abook();'>\");";
 199          echo "         // --></SCRIPT><NOSCRIPT>\n";
 200          echo "         <input type=submit name=\"html_addr_search\" value=\""._("Addresses")."\">";
 201          echo "      </NOSCRIPT>\n";
 202       } else {
 203          echo "      <input type=submit name=\"html_addr_search\" value=\""._("Addresses")."\">";
 204       }
 205       echo "\n    <INPUT TYPE=SUBMIT NAME=send VALUE=\"". _("Send") . "\">\n";
 206       echo "   </TD>\n";
 207       echo "   </TR>\n\n";
 208
 209
 210       echo "   <TR>\n";
 211       echo "      <TD BGCOLOR=\"$color[4]\" COLSPAN=3>\n";
 212       echo "         &nbsp;&nbsp;<TEXTAREA NAME=body ROWS=20 COLS=\"$editor_size\" WRAP=HARD>";
 213       if ($use_signature == true && $newmail == true) {
 214          echo htmlspecialchars($body) . "\n\n-- \n" . htmlspecialchars($signature);
 215       } else {
 216          echo htmlspecialchars($body);
 217       }
 218       echo "</TEXTAREA><BR>\n";
 219       echo "      </TD>\n";
 220       echo "   </TR>\n";
 221       echo "   <TR><TD COLSPAN=3 ALIGN=CENTER><INPUT TYPE=SUBMIT NAME=send VALUE=\"";
 222       echo _("Send");
 223       echo "\"></TD></TR>\n";
 224
 225       // This code is for attachments
 226       echo "   <tr>\n";
 227       echo "     <TD WIDTH=50 BGCOLOR=\"$color[0]\" VALIGN=TOP ALIGN=RIGHT>\n";
 228       echo "      <SMALL><BR></SMALL>"._("Attach:");
 229       echo "      </td><td colspan=2 ALIGN=left BGCOLOR=\"$color[0]\">\n";
 230       //      echo "      <INPUT TYPE=\"hidden\" name=\"MAX_FILE_SIZE\"\n";
 231       //      echo "      value=\"10000\">\n";
 232       echo "      <INPUT NAME=\"attachfile\" TYPE=\"file\">\n";
 233       echo "      &nbsp;&nbsp;<input type=\"submit\" name=\"attach\"\n";
 234       echo "      value=\"" . _("Add") ."\">\n";
 235       echo "     </td>\n";
 236       echo "   </tr>\n";
 237       if (isset($attachments) && count($attachments)>0) {
 238          echo "</tr><tr><td width=50 bgcolor=\"$color[0]\" align=right>\n";
 239          echo "&nbsp;";
 240          echo "</td><td align=left colspan=2 bgcolor=\"$color[0]\">";
 241          while (list($localname, $remotename) = each($attachments)) {
 242             echo "<input type=\"checkbox\" name=\"delete[]\" value=\"$localname\">\n";
 243             echo "$remotename <input type=\"hidden\" name=\"attachments[$localname]\" value=\"$remotename\"><br>\n";
 244          }
 245
 246          echo "<input type=\"submit\" name=\"do_delete\" value=\""._("Delete selected attachments")."\">\n";
 247          echo "</td></tr>";
 248       }
 249       // End of attachment code
 250
 251       echo "</TABLE>\n";
 252       echo "</FORM>";
 253    }
 254
 255    function showSentForm () {
 256       echo "<BR><BR><BR><CENTER><B>Message Sent!</B><BR><BR>";
 257       echo "You will be automatically forwarded.<BR>If not, <A HREF=\"right_main.php\">click here</A>";
 258       echo "</CENTER>";
 259    }
 260
 261    function checkInput ($show) {
 262       /** I implemented the $show variable because the error messages
 263           were getting sent before the page header.  So, I check once
 264           using $show=false, and then when i'm ready to display the
 265           error message, show=true **/
 266       global $body, $send_to, $subject, $color;
 267
 268       if ($body == "" && $subject == "") {
 269          if ($show)
 270             plain_error_message(_("You have not entered a message body or a subject."), $color);
 271          return false;
 272       } else if ($send_to == "") {
 273          if ($show)
 274             plain_error_message(_("You have not filled in the \"To:\" field."), $color);
 275          return false;
 276       }
 277       return true;
 278    } // function checkInput()
 279
 280
 281    if (($mailbox == "") || ($mailbox == "None"))
 282       $mailbox = "INBOX";
 283
 284    if(isset($send)) {
 285       if (checkInput(false)) {
 286          $urlMailbox = urlencode ($mailbox);
 287          sendMessage($send_to, $send_to_cc, $send_to_bcc, $subject, $body, $reply_id);
 288          header ("Location: right_main.php?mailbox=$urlMailbox&sort=$sort&startMessage=1");
 289       } else {
 290          $imapConnection = sqimap_login($username, $key, $imapServerAddress, $imapPort, 0);
 291          displayPageHeader($color, $mailbox);
 292          checkInput(true);
 293
 294          showInputForm();
 295       }
 296    } else if ($html_addr_search_done) {
 297       is_logged_in();
 298       displayPageHeader($color, $mailbox);
 299
 300       $body = stripslashes($body);
 301       $send_to = stripslashes($send_to);
 302       $send_to_cc = stripslashes($send_to_cc);
 303       $send_to_bcc = stripslashes($send_to_bcc);
 304       $subject = stripslashes($subject);
 305
 306       for ($i=0; $i < count($send_to_search); $i++) {
 307          if ($send_to)
 308             $send_to .= ", ";
 309          $send_to .= $send_to_search[$i];
 310       }
 311
 312       for ($i=0; $i < count($send_to_cc_search); $i++) {
 313          if ($send_to_cc)
 314             $send_to_cc .= ", ";
 315          $send_to_cc .= $send_to_cc_search[$i];
 316       }
 317
 318       showInputForm();
 319    } else if ($html_addr_search) {
 320       // I am using an include so as to elminiate an extra unnecessary click.  If you
 321       // can think of a better way, please implement it.
 322       include ("addrbook_search_html.php");
 323    } else if (isset($attach)) {
 324       is_logged_in();
 325       displayPageHeader($color, $mailbox);
 326
 327       $localfilename = md5("$attachfile, $attachfile_name, $REMOTE_IP, $REMOTE_PORT, $UNIQUE_ID, and everything else that may add entropy");
 328       $localfilename = $localfilename;
 329
 330       // Put the file in a better place
 331       error_reporting(0); // Rename will produce error output if it fails
 332       if (!rename($attachfile, $attachment_dir.$localfilename)) {
 333          if (!copy($attachfile, $attachment_dir.$localfilename)) {
 334             plain_error_message(_("Could not move/copy file. File not attached"));
 335             $failed = true;
 336          }
 337       }
 338       // If it still exists, PHP will remove the original file
 339
 340       if (!$failed) {
 341          // Write information about the file
 342          $fp = fopen ($attachment_dir.$localfilename.".info", "w");
 343          fputs ($fp, "$attachfile_type\n$attachfile_name\n");
 344          fclose ($fp);
 345
 346          $attachments[$localfilename] = $attachfile_name;
 347       }
 348
 349       showInputForm();
 350    } else if (isset($do_delete)) {
 351       is_logged_in();
 352       displayPageHeader($color, $mailbox);
 353
 354       while (list($key, $localname) = each($delete)) {
 355          array_splice ($attachments, $key, 1);
 356          unlink ($attachment_dir.$localname);
 357          unlink ($attachment_dir.$localname.".info");
 358       }
 359
 360       showInputForm();
 361    } else {
 362       $imapConnection = sqimap_login($username, $key, $imapServerAddress, $imapPort, 0);
 363       displayPageHeader($color, $mailbox);
 364
 365       $newmail = true;
 366       newMail();
 367       showInputForm();
 368    }
 369 ?>