/**
* download.php
*
- * Copyright (c) 1999-2002 The SquirrelMail Project Team
+ * Copyright (c) 1999-2003 The SquirrelMail Project Team
* Licensed under the GNU GPL. For full terms see the file COPYING.
*
* Handles attachment downloads to the users computer.
header('Cache-Control: cache');
/* globals */
+sqgetGlobalVar('key', $key, SQ_COOKIE);
+sqgetGlobalVar('username', $username, SQ_SESSION);
+sqgetGlobalVar('onetimepad', $onetimepad, SQ_SESSION);
+sqgetGlobalVar('messages', $messages, SQ_SESSION);
+sqgetGlobalVar('mailbox', $mailbox, SQ_GET);
+sqgetGlobalVar('ent_id', $ent_id, SQ_GET);
+sqgetGlobalVar('absolute_dl',$absolute_dl, SQ_GET);
+if ( sqgetGlobalVar('passed_id', $temp, SQ_GET) ) {
+ $passed_id = (int) $temp;
+}
-$key = $_COOKIE['key'];
-$username = $_SESSION['username'];
-$onetimepad = $_SESSION['onetimepad'];
-$mailbox = $_GET['mailbox'];
-$passed_id = $_GET['passed_id'];
-$passed_ent_id = $_GET['passed_ent_id'];
-$base_uri = $base_uri = $_SESSION['base_uri'];
-
-if (isset($_GET['startMessage'])) {
- $startMessage = $_GET['startMessage'];
-}
-if(isset($_GET['where'])) {
- $where = $_GET['where'];
-}
-if(isset($_GET['what'])) {
- $what = $_GET['what'];
-}
-if(isset($_GET['showHeaders'])) {
- $showHeaders = $_GET['showHeaders'];
-}
-if(isset($_GET['absolute_dl'])) {
- $absolute_dl = $_GET['absolute_dl'];
-}
-if (isset($_GET['show_more_cc'])) {
- $show_more = $_GET['show_more_cc'];
-}
-if(isset($_GET['show_more_bcc'])) {
- $show_more = $_GET['show_more_bcc'];
-}
-if(isset($_GET['show_more'])) {
- $show_more = $_GET['show_more'];
-}
-if(isset($_GET['sort'])) {
- $sort = $_GET['sort'];
-}
-
/* end globals */
-function get_extract_to_target_list($imapConnection) {
- $boxes = sqimap_mailbox_list($imapConnection);
- for ($i = 0; $i < count($boxes); $i++) {
- if (!in_array('noselect', $boxes[$i]['flags'])) {
- $box = $boxes[$i]['unformatted'];
- $box2 = str_replace(' ', ' ', $boxes[$i]['unformatted-disp']);
- if ( $box2 == 'INBOX' ) {
- $box2 = _("INBOX");
- }
- echo "<option value=\"$box\">$box2</option>\n";
- }
- }
-}
-$mailbox = decodeHeader($mailbox);
-
-global $messages, $uid_support;
+global $uid_support;
$imapConnection = sqimap_login($username, $key, $imapServerAddress, $imapPort, 0);
$mbx_response = sqimap_mailbox_select($imapConnection, $mailbox);
-if (!isset($passed_ent_id)) {
- $passed_ent_id = '';
-}
$message = &$messages[$mbx_response['UIDVALIDITY']]["$passed_id"];
if (!is_object($message)) {
$message = sqimap_get_message($imapConnection,$passed_id, $mailbox);
}
$subject = $message->rfc822_header->subject;
-$message = &$message->getEntity($ent_id);
-$header = $message->header;
-if ($message->rfc822_header) {
- $subject = $message->rfc822_header->subject;
- $charset = $header->content_type->properties['charset'];
+if ($ent_id) {
+ $message = &$message->getEntity($ent_id);
+ $header = $message->header;
+
+ if ($message->rfc822_header) {
+ $subject = $message->rfc822_header->subject;
+ $charset = $header->content_type->properties['charset'];
+ } else {
+ $header = $message->header;
+ $charset = $header->getParameter('charset');
+ }
+ $type0 = $header->type0;
+ $type1 = $header->type1;
+ $encoding = strtolower($header->encoding);
} else {
- $header = $message->header;
- $charset = $header->getParameter('charset');
+ /* raw message */
+ $type0 = 'message';
+ $type1 = 'rfc822';
+ $encoding = 'US-ASCII';
+ $header = $message->header;
}
-$type0 = $header->type0;
-$type1 = $header->type1;
-$encoding = strtolower($header->encoding);
-/*
-$extracted = false;
-if (isset($extract_message) && $extract_message) {
- $cmd = "FETCH $passed_id BODY[$passed_ent_id]";
- $read = sqimap_run_command ($imapConnection, $cmd, true, $response, $message, $uid_support);
- $cnt = count($read);
- $body = '';
- $length = 0;
- for ($i=1;$i<$cnt;$i++) {
- $length = $length + strlen($read[$i]);
- $body .= $read[$i];
- }
- if (isset($targetMailbox) && $length>0) {
- sqimap_append ($imapConnection, $targetMailbox, $length);
- fputs($imapConnection,$body);
- sqimap_append_done ($imapConnection);
- $extracted = true;
- }
-}
-
-
-*/
/*
* lets redefine message as this particular entity that we wish to display.
* it should hold only the header for this entity. We need to fetch the body
}
$filename = '';
if (is_object($message->header->disposition)) {
- $filename = decodeHeader($header->disposition->getProperty('filename'));
+ $filename = $header->disposition->getProperty('filename');
if (!$filename) {
- $filename = decodeHeader($header->disposition->getProperty('name'));
+ $filename = $header->disposition->getProperty('name');
}
+ if (!$filename) {
+ $filename = $header->getParameter('name');
+ }
+} else {
+ $filename = $header->getParameter('name');
}
+
+$filename = decodeHeader($filename);
if (strlen($filename) < 1) {
if ($type1 == 'plain' && $type0 == 'text') {
$suffix = 'txt';
}
if (strlen($filename) < 1) {
- $filename = "untitled$ent_id.$suffix";
+ $filename = 'untitled'.strip_tags($ent_id).'.'.$suffix;
} else {
$filename = "$filename.$suffix";
}
* viewer (built in to squirrelmail). Otherwise, it sets the
* content-type as application/octet-stream
*/
-if (isset($absolute_dl) && $absolute_dl == 'true') {
+if (isset($absolute_dl) && $absolute_dl) {
DumpHeaders($type0, $type1, $filename, 1);
} else {
DumpHeaders($type0, $type1, $filename, 0);
* version of IE. I don't know if it works with Opera, but it should now.
*/
function DumpHeaders($type0, $type1, $filename, $force) {
- global $_SERVER, $languages, $squirrelmail_language;
- $isIE = 0;
+ global $languages, $squirrelmail_language;
+ $isIE = $isIE6 = 0;
- $HTTP_USER_AGENT = $_SERVER['HTTP_USER_AGENT'];
+ sqgetGlobalVar('HTTP_USER_AGENT', $HTTP_USER_AGENT, SQ_SERVER);
if (strstr($HTTP_USER_AGENT, 'compatible; MSIE ') !== false &&
strstr($HTTP_USER_AGENT, 'Opera') === false) {
}
// A Pox on Microsoft and it's Office!
- if (! $force) {
+ if (!$force) {
// Try to show in browser window
header("Content-Disposition: inline; filename=\"$filename\"");
header("Content-Type: $type0/$type1; name=\"$filename\"");
//
// The best thing you can do for IE is to upgrade to the latest
// version
- if ($isIE && !isset($isIE6)) {
+ if ($isIE && !$isIE6) {
// http://support.microsoft.com/support/kb/articles/Q182/3/15.asp
// Do not have quotes around filename, but that applied to
// "attachment"... does it apply to inline too?
// This combination seems to work mostly. IE 5.5 SP 1 has
// known issues (see the Microsoft Knowledge Base)
header("Content-Disposition: inline; filename=$filename");
-
// This works for most types, but doesn't work with Word files
header("Content-Type: application/download; name=\"$filename\"");