X-Git-Url: https://vcs.fsf.org/?a=blobdiff_plain;f=src%2Faddrbook_search.php;h=89143a808bad4c006201a5bcca985a8e04e249bd;hb=a11df61b949068712242d77e2c18311c93e63979;hp=55dc5cae61b509b4a694783bcdee8e52f06bf408;hpb=10455998ff36ac23c25799914656fd4f13c14b6f;p=squirrelmail.git

diff --git a/src/addrbook_search.php b/src/addrbook_search.php
index 55dc5cae..89143a80 100644
--- a/src/addrbook_search.php
+++ b/src/addrbook_search.php
@@ -1,266 +1,296 @@
 <?php
-   /**
-    **  addrbook_search.php
-    **
-    **  Copyright (c) 1999-2000 The SquirrelMail development team
-    **  Licensed under the GNU GPL. For full terms see the file COPYING.
-    **
-    **  Handle addressbook searching in the popup window.
-    **
-    **  NOTE: A lot of this code is similar to the code in
-    **        addrbook_search_html.html -- If you change one,
-    **        change the other one too!
-    **/
-
-   // Function to include JavaScript code
-   function insert_javascript() {
-?>
-<SCRIPT LANGUAGE="Javascript"><!--
 
-function to_and_close($addr) {
-  to_address($addr);
-  parent.close();
+/**
+ * addrbook_search.php
+ *
+ * Copyright (c) 1999-2003 The SquirrelMail Project Team
+ * Licensed under the GNU GPL. For full terms see the file COPYING.
+ *
+ * Handle addressbook searching in the popup window.
+ *
+ * NOTE: A lot of this code is similar to the code in
+ *       addrbook_search_html.html -- If you change one,
+ *       change the other one too!
+ *
+ * $Id$
+ */
+
+/* Path for SquirrelMail required files. */
+define('SM_PATH','../');
+
+/* SquirrelMail required files. */
+require_once(SM_PATH . 'include/validate.php');
+require_once(SM_PATH . 'functions/strings.php');
+require_once(SM_PATH . 'functions/html.php');
+
+/* lets get the global vars we may need */
+$key  = $_COOKIE['key'];
+$username = $_SESSION['username'];
+$onetimepad = $_SESSION['onetimepad'];
+$base_uri = $_SESSION['base_uri'];
+
+sqextractGlobalVar('show');
+if ( isset($_POST['query']) ) {
+    $query = $_POST['query'];
+}
+if ( isset($_POST['listall']) ) {
+    $listall = $_POST['listall'];
+}
+if ( isset($_POST['backend'] ) ) {
+    $backend = $_POST['backend'];
 }
 
-function to_address($addr) {
-  var prefix    = "";
-  var pwintype = typeof parent.opener.document.compose;
-
-  $addr = $addr.replace(/ {1,35}$/, "");
+/* Function to include JavaScript code */
+function insert_javascript() {
+    ?>
+    <SCRIPT LANGUAGE="Javascript"><!--
 
-  if(pwintype != "undefined" ) {
-    if ( parent.opener.document.compose.send_to.value ) {
-      prefix = ", ";
-      parent.opener.document.compose.send_to.value = 
-        parent.opener.document.compose.send_to.value + ", " + $addr;
-        
-    } else {
-      parent.opener.document.compose.send_to.value = $addr;
+    function to_and_close($addr) {
+        to_address($addr);
+        parent.close();
     }
-  }
-}
-
-function cc_address($addr) {
-  var prefix    = "";
-  var pwintype = typeof parent.opener.document.compose;
 
-  $addr = $addr.replace(/ {1,35}$/, "");
+    function to_address($addr) {
+        var prefix    = "";
+        var pwintype = typeof parent.opener.document.compose;
+
+        $addr = $addr.replace(/ {1,35}$/, "");
+
+        if (pwintype != "undefined") {
+            if (parent.opener.document.compose.send_to.value) {
+                prefix = ", ";
+                parent.opener.document.compose.send_to.value =
+                    parent.opener.document.compose.send_to.value + ", " + $addr;
+            } else {
+                parent.opener.document.compose.send_to.value = $addr;
+            }
+        }
+    }
 
-  if(pwintype != "undefined" ) {
-    if ( parent.opener.document.compose.send_to_cc.value ) {
-      prefix = ", ";
-      parent.opener.document.compose.send_to_cc.value = 
-        parent.opener.document.compose.send_to_cc.value + ", " + $addr;      
-    } else {
-      parent.opener.document.compose.send_to_cc.value = $addr;
+    function cc_address($addr) {
+        var prefix    = "";
+        var pwintype = typeof parent.opener.document.compose;
+
+        $addr = $addr.replace(/ {1,35}$/, "");
+
+        if (pwintype != "undefined") {
+            if (parent.opener.document.compose.send_to_cc.value) {
+                prefix = ", ";
+                parent.opener.document.compose.send_to_cc.value =
+                    parent.opener.document.compose.send_to_cc.value + ", " + $addr;
+            } else {
+                parent.opener.document.compose.send_to_cc.value = $addr;
+            }
+        }
     }
-  }
-}
 
-function bcc_address($addr) {
-  var prefix    = "";
-  var pwintype = typeof parent.opener.document.compose;
-  
-  $addr = $addr.replace(/ {1,35}$/, "");
-
-  if(pwintype != "undefined" ) {
-    if ( parent.opener.document.compose.send_to_bcc.value ) {
-      prefix = ", ";
-      parent.opener.document.compose.send_to_bcc.value = 
-        parent.opener.document.compose.send_to_bcc.value + ", " + $addr;      
-    } else {
-      parent.opener.document.compose.send_to_bcc.value = $addr;
+    function bcc_address($addr) {
+        var prefix    = "";
+        var pwintype = typeof parent.opener.document.compose;
+
+        $addr = $addr.replace(/ {1,35}$/, "");
+
+        if (pwintype != "undefined") {
+            if (parent.opener.document.compose.send_to_bcc.value) {
+                prefix = ", ";
+                parent.opener.document.compose.send_to_bcc.value =
+                    parent.opener.document.compose.send_to_bcc.value + ", " + $addr;
+            } else {
+                parent.opener.document.compose.send_to_bcc.value = $addr;
+            }
+        }
     }
-  }
-}
 
 // --></SCRIPT>
+<?php
+} /* End of included JavaScript */
 
-<?php 
-   } // End of included JavaScript
-
-
-   // List search results
-   function display_result($res, $includesource = true) {
-      global $color;
-
-      if(sizeof($res) <= 0) return;
-
-      insert_javascript();
-
-      $line = 0;
-      print "<TABLE BORDER=0 WIDTH=\"98%\" ALIGN=center>";
-      printf("<TR BGCOLOR=\"$color[9]\"><TH ALIGN=left>&nbsp;".
-	     "<TH ALIGN=left>&nbsp;%s<TH ALIGN=left>&nbsp;%s".
-	     "<TH ALIGN=left>&nbsp;%s",
-	     _("Name"), _("E-mail"), _("Info"));
 
-      if($includesource)
-	 printf("<TH ALIGN=left WIDTH=\"10%%\">&nbsp;%s", _("Source"));
+/* List search results */
+function display_result($res, $includesource = true) {
+    global $color;
+        
+    if(sizeof($res) <= 0) return;
+        
+    insert_javascript();
+        
+    $line = 0;
+    echo html_tag( 'table', '', 'center', '', 'border="0" width="98%"' ) .
+    html_tag( 'tr', '', '', $color[9] ) .
+    html_tag( 'th', '&nbsp;', 'left' ) .
+    html_tag( 'th', '&nbsp;' . _("Name"), 'left' ) .
+    html_tag( 'th', '&nbsp;' . _("E-mail"), 'left' ) .
+    html_tag( 'th', '&nbsp;' . _("Info"), 'left' );
+
+    if ($includesource) {
+        echo html_tag( 'th', '&nbsp;' . _("Source"), 'left', 'width="10%"' );
+    }    
+    echo "</tr>\n";
+    
+    while (list($undef, $row) = each($res)) {
+        $tr_bgcolor = '';
+        $email = htmlspecialchars(addcslashes(AddressBook::full_address($row), "'"), ENT_QUOTES);
+        if ($line % 2) { $tr_bgcolor = $color[0]; }
+        echo html_tag( 'tr', '', '', $tr_bgcolor, 'nowrap' ) .
+        html_tag( 'td',
+             '<small><a href="javascript:to_address(' . 
+                                       "'" . $email . "');\">To</A> | " .
+             '<a href="javascript:cc_address(' . 
+                                       "'" . $email . "');\">Cc</A> | " .
+             '<a href="javascript:bcc_address(' . 
+                                 "'" . $email . "');\">Bcc</A></small>",
+        'center', '', 'valign="top" width="5%" nowrap' ) .
+        html_tag( 'td', '&nbsp;' . htmlspecialchars($row['name']), 'left', '', 'valign="top" nowrap' ) .
+        html_tag( 'td', '&nbsp;' .
+             '<a href="javascript:to_and_close(' .
+                 "'" . $email . "');\">" . htmlspecialchars($row['email']) . '</A>'
+        , 'left', '', 'valign="top"' ) .
+        html_tag( 'td', htmlspecialchars($row['label']), 'left', '', 'valign="top" nowrap' );
+        if ($includesource) {
+            echo html_tag( 'td', '&nbsp;' . $row['source'], 'left', '', 'valign="top" nowrap' );
+        }
+
+        echo "</tr>\n";
+        $line++;
+    }
+    echo '</table>';
+}
 
-      print "</TR>\n";
-      
-      while(list($undef, $row) = each($res)) {
-	 printf("<tr%s nowrap><td valign=top nowrap align=center width=\"5%%\">".
-		"<small><a href=\"javascript:to_address('%s');\">To</A> | ".
-		"<a href=\"javascript:cc_address('%s');\">Cc</A> | ".
-		"<a href=\"javascript:bcc_address('%s');\">Bcc</A></small>".
-		"<td nowrap valign=top>&nbsp;%s&nbsp;<td nowrap valign=top>".
-		"&nbsp;<a href=\"javascript:to_and_close('%s');\">%s</A>&nbsp;".
-		"<td valign=top>&nbsp;%s&nbsp;", 
-		($line % 2) ? " bgcolor=\"$color[0]\"" : "", 
-		$row["email"], $row["email"], $row["email"], 
-		$row["name"],  $row["email"], $row["email"],
-		$row["label"]);
+/* ================= End of functions ================= */
+    
+require_once('../functions/strings.php');
+require_once('../functions/addressbook.php');
+    
+displayHtmlHeader();
+    
+/* Initialize vars */
+if (!isset($query)) { $query = ''; }
+if (!isset($show))  { $show  = ''; }
+if (!isset($backend)) { $backend = ''; }
+
+/* Choose correct colors for top and bottom frame */
+if ($show == 'form' && !isset($listall)) {
+    echo '<BODY TEXT="' . $color[6] . '" BGCOLOR="' . $color[3] . '" ' .
+               'LINK="' . $color[6] . '" VLINK="'   . $color[6] . '" ' .
+                                        'ALINK="'   . $color[6] . '" ' .
+         'OnLoad="document.sform.query.focus();">';
+} else {
+    echo '<BODY TEXT="' . $color[8] . '" BGCOLOR="' . $color[4] . '" ' .
+               'LINK="' . $color[7] . '" VLINK="'   . $color[7] . '" ' .
+                                        'ALINK="'   . $color[7] . "\">\n";
+}
 
-	 if($includesource)
-	    printf("<td nowrap valign=top>&nbsp;%s", $row["source"]);
+/* Empty search */
+if (empty($query) && empty($show) && empty($listall)) {
+    echo html_tag( 'p', '<br>' .
+                      _("No persons matching your search was found"),
+            'center' ) .
+          "\n</BODY></HTML>\n",
+    exit;
+}
 
-	 print "</TR>\n";
-	 $line++;
-      }
-      print "</TABLE>";
-   }
+/* Initialize addressbook */
+$abook = addressbook_init();
+
+/* Create search form */
+if ($show == 'form' && empty($listall)) {
+    echo '<FORM NAME=sform TARGET=abookres ACTION="addrbook_search.php'. 
+         '" METHOD="POST">' . "\n" .
+         html_tag( 'table', '', '', '', 'border="0" width="100%" height="100%"' ) .
+         html_tag( 'tr' ) .
+         html_tag( 'td', '  <strong>' . _("Search for") . "</strong>\n", 'left', '', 'nowrap valign="middle" width="10%"' ) .
+         html_tag( 'td', '', 'left', '', '' ) .
+                 '<INPUT TYPE=text NAME=query VALUE="' . htmlspecialchars($query) .
+                 "\" SIZE=28>\n";
+
+    /* List all backends to allow the user to choose where to search */
+    if ($abook->numbackends > 1) {
+        echo '<STRONG>' . _("in") . '</STRONG>&nbsp;<SELECT NAME=backend>'."\n".
+             '<OPTION VALUE=-1 SELECTED>' . _("All address books") . "\n";
+        $ret = $abook->get_backend_list();
+        while (list($undef,$v) = each($ret)) {
+            echo '<OPTION VALUE=' . $v->bnum . '>' . $v->sname . "\n";
+        }
+        echo "</SELECT>\n";
+    } else {
+        echo '<INPUT TYPE=hidden NAME=backend VALUE=-1>' . "\n";
+    }
+        
+    echo '</td></tr>' .
+    html_tag( 'tr',
+                    html_tag( 'td', '', 'left' ) .
+                    html_tag( 'td',
+                            '<INPUT TYPE=submit VALUE="' . _("Search") . '" NAME=show>' .
+                            '&nbsp;|&nbsp;<INPUT TYPE=submit VALUE="' . _("List all") .
+                            '" NAME=listall>' . "\n" .
+                            '&nbsp;|&nbsp;<INPUT TYPE=button VALUE="' . _("Close") .
+                            '" onclick="parent.close();">' . "\n" ,
+                    'left' )
+            ) .
+         '</table></form>' . "\n";
+} else {
+
+    /* Show personal addressbook */
+    if ($show == 'blank' && empty($listall)) {
+
+        if($backend != -1 || $show == 'blank') {
+            if ($show == 'blank') {
+                $backend = $abook->localbackend;
+            }
+            $res = $abook->list_addr($backend);
+
+            if(is_array($res)) {
+                usort($res,'alistcmp');
+                display_result($res, false);
+            } else {
+                echo html_tag( 'p', '<strong>' .
+                                 sprintf(_("Unable to list addresses from %s"),
+                                     $abook->backends[$backend]->sname) . '</strong>' ,
+                       'center' ) . "\n";
+            }
+        } else {
+            $res = $abook->list_addr();
+            usort($res,'alistcmp');
+            display_result($res, true);
+        }
 
-   /* ================= End of functions ================= */
+    } else {
+        if( !empty( $listall ) ){
+          $query = '*';
+        }
+
+        /* Do the search */
+        if (!empty($query)) {
+    
+            if($backend == -1) {
+                $res = $abook->s_search($query);
+            } else {
+                $res = $abook->s_search($query, $backend);
+            }
+        
+            if (!is_array($res)) {
+                echo html_tag( 'p', '<b><br>' .
+                                 _("Your search failed with the following error(s)") .
+                                 ':<br>' . $abook->error . "</b>\n" ,
+                       'center' ) .
+                "\n</BODY></HTML>\n";
+                exit;
+            }
+        
+            if (sizeof($res) == 0) {
+                echo html_tag( 'p', '<br><b>' .
+                                 _("No persons matching your search was found") . "</b>\n" ,
+                       'center' ) .
+                "\n</BODY></HTML>\n";
+                exit;
+            }
+        
+            display_result($res);
+        }
+    }
+   
+}
 
-   session_start();
+echo "</BODY></HTML>\n";
    
-   if (!isset($i18n_php))
-      include("../functions/i18n.php");
-
-   if(!isset($logged_in) || !isset($username) || !isset($key)) {
-      include ("../themes/default_theme.php");
-      include ("../functions/display_messages.php");
-      printf('<html><BODY TEXT="%s" BGCOLOR="%s" LINK="%s" VLINK="%s" ALINK="%s">',
-              $color[8], $color[4], $color[7], $color[7], $color[7]);
-      plain_error_message(_("You need a valid user and password to access this page!")
-                          . "<br><a href=\"../src/login.php\">"
-                          . _("Click here to log back in.") . "</a>.", $color);
-      echo "</body></html>";
-      exit;
-   }
-   if (!isset($config_php))
-      include("../config/config.php");
-   if (!isset($array_php))
-      include("../functions/array.php");
-   if (!isset($auth_php))
-      include("../functions/auth.php");
-   if (!isset($strings_php))
-      include("../functions/strings.php");
-   if (!isset($page_header_php))
-      include("../functions/page_header.php");
-   if (!isset($addressbook_php))
-      include("../functions/addressbook.php");
-
-   is_logged_in();
-   include("../src/load_prefs.php");
-
-   displayHtmlHeader();
-
-   // Choose correct colors for top and bottom frame
-   if($show == "form") {
-      echo "<BODY BGCOLOR=\"$color[3]\" TEXT=\"$color[6]\" ";
-      echo "LINK=\"$color[6]\" VLINK=\"$color[6]\" ALINK=\"$color[6]\" ";
-      echo "OnLoad=\"document.sform.query.focus();\">";  
-   } else {
-      echo "<BODY TEXT=\"$color[8]\" BGCOLOR=\"$color[4]\" ";
-      echo "LINK=\"$color[7]\" VLINK=\"$color[7]\" ALINK=\"$color[7]\">\n";
-   }
-
-   // Empty search
-   if(empty($query) && empty($show) && empty($listall))  {
-      printf("<P ALIGN=center><BR>%s</P>\n</BODY></HTML>\n",
-	     _("No persons matching your search was found"));
-      exit;
-   }
-
-   // Initialize addressbook
-   $abook = addressbook_init();
-
-   // Create search form 
-   if($show == "form") {
-      printf("<FORM NAME=sform TARGET=abookres ACTION=\"%s\" METHOD=\"POST\">\n",
-	     $PHP_SELF);
-      printf("<TABLE BORDER=0 WIDTH=\"100%%\" HEIGHT=\"100%%\">");
-      printf("<TR><TD NOWRAP VALIGN=middle>\n");
-      printf("  <STRONG>%s</STRONG>\n", _("Search for"));
-      printf("  <INPUT TYPE=text NAME=query VALUE=\"%s\" SIZE=26>\n",
-	     htmlspecialchars($query));
-
-      // List all backends to allow the user to choose where to search
-      if($abook->numbackends > 1) {
-	 printf("<STRONG>%s</STRONG>&nbsp;<SELECT NAME=backend>\n", 
-		_("in"));
-	 printf("<OPTION VALUE=-1 SELECTED>%s\n", 
-		_("All address books"));
-	 $ret = $abook->get_backend_list();
-	 while(list($undef,$v) = each($ret)) 
-	    printf("<OPTION VALUE=%d>%s\n", $v->bnum, $v->sname);
-	 printf("</SELECT>\n");
-      } else {
-	 printf("<INPUT TYPE=hidden NAME=backend VALUE=-1>\n");
-      }
-
-      printf("<INPUT TYPE=submit VALUE=\"%s\">",
-	     _("Search"));
-      printf("&nbsp;|&nbsp;<INPUT TYPE=submit VALUE=\"%s\" NAME=listall>\n",
-             _("List all"));
-      printf("</TD><TD ALIGN=right>\n");
-      printf("<INPUT TYPE=button VALUE=\"%s\" onclick=\"parent.close();\">\n",
-             _("Close window"));
-      printf("</TD></TR></TABLE></FORM>\n");
-   } else
-
-   // Show personal addressbook
-   if($show == "blank" || !empty($listall)) {
-
-      if($backend != -1 || $show == "blank") {
-	 if($show == "blank") 
-	    $backend = $abook->localbackend;
-
-	 //printf("<H3 ALIGN=center>%s</H3>\n", $abook->backends[$backend]->sname);
-
-	 $res = $abook->list_addr($backend);
-
-	 if(is_array($res)) {
-	    display_result($res, false);
-	 } else {
-	    printf("<P ALIGN=center><STRONG>"._("Unable to list addresses from %s").
-		   "</STRONG></P>\n", $abook->backends[$backend]->sname);
-	 }
-
-      } else {
-	 $res = $abook->list_addr();
-	 display_result($res, true);
-      }
-
-   } else
-
-   // Do the search
-   if(!empty($query) && empty($listall)) {
-
-      if($backend == -1) {
-	 $res = $abook->s_search($query);
-      } else {
-	 $res = $abook->s_search($query, $backend);
-      }
-
-      if(!is_array($res)) {
-	 printf("<P ALIGN=center><B><BR>%s:<br>%s</B></P>\n</BODY></HTML>\n",
-		_("Your search failed with the following error(s)"),
-		$abook->error);
-	 exit;
-      }
-
-      if(sizeof($res) == 0) {
-	 printf("<P ALIGN=center><BR><B>%s.</B></P>\n</BODY></HTML>\n",
-		_("No persons matching your search was found"));
-	 exit;
-      }
-
-      display_result($res);
-   }
 ?>
-
-</BODY></HTML>