Adding Khmer translation. Thanks to Khoem Sokhem.
[squirrelmail.git] / include / init.php
CommitLineData
202bcbcc 1<?php
2
3/**
4 * init.php -- initialisation file
5 *
6 * File should be loaded in every file in src/ or plugins that occupate an entire frame
7 *
8 * @copyright &copy; 2006 The SquirrelMail Project Team
9 * @license http://opensource.org/licenses/gpl-license.php GNU Public License
10 * @version $Id$
11 * @package squirrelmail
12 */
13
202bcbcc 14/**
15 * This is a development version so in order to track programmer mistakes we
16 * set the error reporting to E_ALL
1888b1bf 17FIXME: disabling this for now, because we now have $sm_debug_mode, but the problem with that is that we don't know what it will be until we have loaded the config file, a good 175 lines below after several important files have been included, etc. For now, we'll trust that developers have turned on E_ALL in php.ini anyway, but this can be uncommented if not.
202bcbcc 18 */
1888b1bf 19//error_reporting(E_ALL);
20
202bcbcc 21
202bcbcc 22/**
c7ebdfcf 23 * Make sure we have a page name
24 *
25 */
26if ( !defined('PAGE_NAME') ) define('PAGE_NAME', NULL);
27
28
29/**
6a2a6e44 30 * If register_globals are on, unregister globals.
a3b99374 31 * Second test covers boolean set as string (php_value register_globals off).
6a2a6e44 32 */
55dd9abf 33if ((bool) ini_get('register_globals') &&
a3b99374 34 strtolower(ini_get('register_globals'))!='off') {
6a2a6e44 35 /**
55dd9abf 36 * Remove all globals that are not reserved by PHP
37 * 'value' and 'key' are used by foreach. Don't unset them inside foreach.
6a2a6e44 38 */
55dd9abf 39 foreach ($GLOBALS as $key => $value) {
40 switch($key) {
41 case 'HTTP_POST_VARS':
42 case '_POST':
43 case 'HTTP_GET_VARS':
44 case '_GET':
45 case 'HTTP_COOKIE_VARS':
46 case '_COOKIE':
47 case 'HTTP_SERVER_VARS':
48 case '_SERVER':
49 case 'HTTP_ENV_VARS':
50 case '_ENV':
51 case 'HTTP_POST_FILES':
52 case '_FILES':
53 case '_REQUEST':
54 case 'HTTP_SESSION_VARS':
55 case '_SESSION':
56 case 'GLOBALS':
57 case 'key':
58 case 'value':
59 break;
55dd9abf 60 default:
61 unset($GLOBALS[$key]);
62 }
6a2a6e44 63 }
55dd9abf 64 // Unset variables used in foreach
65 unset($GLOBALS['key']);
66 unset($GLOBALS['value']);
6a2a6e44 67}
68
71efd1ed 69/**
d849b570 70 * Used as a dummy value, e.g., for passing as an empty
e39d00e9 71 * hook argument (where the value is passed by reference,
72 * and therefore NULL itself is not acceptable).
d849b570 73 */
086ad092 74global $null;
d849b570 75$null = NULL;
76
77/**
dbbd586e 78 * The global $server_os variable will be "windows" if
79 * we are working in a Windows environment or "*nix"
80 * otherwise.
81 */
82global $server_os;
83if (DIRECTORY_SEPARATOR == '\\') $server_os = 'windows'; else $server_os = '*nix';
84
85/**
71efd1ed 86 * [#1518885] session.use_cookies = off breaks SquirrelMail
87 *
086ad092 88 * When session cookies are not used, all http redirects, meta refreshes,
89 * src/download.php and javascript URLs are broken. Setting must be set
71efd1ed 90 * before session is started.
91 */
92if (!(bool)ini_get('session.use_cookies') ||
93 ini_get('session.use_cookies') == 'off') {
94 ini_set('session.use_cookies','1');
95}
6a2a6e44 96
79dd8c72 97/**
98 * Initialize seed of random number generator.
99 * We use a number of things to randomize input: current time in ms,
100 * info about the remote client, info about the current process, the
101 * randomness of uniqid and stat of the current file.
102 *
103 * We seed this here only once per init, not only to save cycles
104 * but also to make the result of mt_rand more random (it now also
105 * depends on the number of times mt_rand was called before in this
106 * execution.
107 */
108$seed = microtime() . $_SERVER['REMOTE_PORT'] . $_SERVER['REMOTE_ADDR'] . getmypid();
109
110if (function_exists('getrusage')) {
111 /* Avoid warnings with Win32 */
112 $dat = @getrusage();
113 if (isset($dat) && is_array($dat)) { $seed .= implode('', $dat); }
114}
115
116if(!empty($_SERVER['UNIQUE_ID'])) {
117 $seed .= $_SERVER['UNIQUE_ID'];
118}
119
120$seed .= uniqid(mt_rand(),TRUE);
121$seed .= implode( '', stat( __FILE__) );
122
8313aa5e 123// mt_srand() uses an integer to seed, so we need to distill our
124// very large seed to something useful (without taking a sub-string,
125// the integer conversion of such a large number is always 0 on
126// many systems, but strangely, 9 hex numbers - even if larger
127// than a signed 32 bit integer - seem to be an acceptable "integer"
128// seed (perhaps it is used as unsigned?)...
129// we may want to revisit this and always force it to be less than
130// 2,147,483,647
131//
132$seed = hexdec(substr(md5($seed), 0, 9));
133
134// PHP 4.2 and up don't require seeding, but their used seed algorithm
135// is of questionable quality, so we keep doing it ourselves. */
136mt_srand($seed);
3f081dd0 137
6a2a6e44 138/**
202bcbcc 139 * calculate SM_PATH and calculate the base_uri
140 * assumptions made: init.php is only called from plugins or from the src dir.
141 * files in the plugin directory may not be part of a subdirectory called "src"
142 *
143 */
144if (isset($_SERVER['SCRIPT_NAME'])) {
3f081dd0 145 $a = explode('/', $_SERVER['SCRIPT_NAME']);
202bcbcc 146} elseif (isset($HTTP_SERVER_VARS['SCRIPT_NAME'])) {
3f081dd0 147 $a = explode('/', $HTTP_SERVER_VARS['SCRIPT_NAME']);
b0829edf 148} else {
3f081dd0 149 $error = 'Unable to detect script environment. Please test your PHP '
150 . 'settings and send your PHP core configuration, $_SERVER and '
151 . '$HTTP_SERVER_VARS contents to the SquirrelMail developers.';
b0829edf 152 die($error);
202bcbcc 153}
154$sSM_PATH = '';
3f081dd0 155for($i = count($a) -2; $i > -1; --$i) {
202bcbcc 156 $sSM_PATH .= '../';
157 if ($a[$i] === 'src' || $a[$i] === 'plugins') {
158 break;
159 }
160}
161
3f081dd0 162$base_uri = implode('/', array_slice($a, 0, $i)). '/';
202bcbcc 163
202bcbcc 164define('SM_PATH',$sSM_PATH);
6a2a6e44 165define('SM_BASE_URI', $base_uri);
3f081dd0 166
167
202bcbcc 168/**
169 * global var $bInit is used to check if initialisation took place.
170 * At this moment it's a workarounf for the include of addrbook_search_html
171 * inside compose.php. If we found a better way then remove this. Do only use
172 * this var if you know for sure a page can be called stand alone and be included
173 * in another file.
174 */
175$bInit = true;
176
8e1e2794 177/**
178 * This theme as a failsafe if no themes were found, or if we error
179 * out before anything could be initialised.
180 */
181$color = array();
182$color[0] = '#DCDCDC'; /* light gray TitleBar */
183$color[1] = '#800000'; /* red */
184$color[2] = '#CC0000'; /* light red Warning/Error Messages */
185$color[3] = '#A0B8C8'; /* green-blue Left Bar Background */
186$color[4] = '#FFFFFF'; /* white Normal Background */
187$color[5] = '#FFFFCC'; /* light yellow Table Headers */
188$color[6] = '#000000'; /* black Text on left bar */
189$color[7] = '#0000CC'; /* blue Links */
190$color[8] = '#000000'; /* black Normal text */
191$color[9] = '#ABABAB'; /* mid-gray Darker version of #0 */
192$color[10] = '#666666'; /* dark gray Darker version of #9 */
193$color[11] = '#770000'; /* dark red Special Folders color */
194$color[12] = '#EDEDED';
195$color[13] = '#800000'; /* (dark red) Color for quoted text -- > 1 quote */
196$color[14] = '#ff0000'; /* (red) Color for quoted text -- >> 2 or more */
197$color[15] = '#002266'; /* (dark blue) Unselectable folders */
198$color[16] = '#ff9933'; /* (orange) Highlight color */
199
1888b1bf 200require(SM_PATH . 'include/constants.php');
202bcbcc 201require(SM_PATH . 'functions/global.php');
4ffcf13a 202require(SM_PATH . 'functions/strings.php');
918fcc1d 203require(SM_PATH . 'functions/arrays.php');
67c826ce 204require(SM_PATH . 'functions/files.php');
5e68a08e 205
206/* load default configuration */
207require(SM_PATH . 'config/config_default.php');
208/* reset arrays in default configuration */
209$ldap_server = array();
210$plugins = array();
211$fontsets = array();
5e68a08e 212$aTemplateSet = array();
28294310 213$aTemplateSet[0]['ID'] = 'default';
214$aTemplateSet[0]['NAME'] = 'Default';
01fd1d1a 215
5e68a08e 216/* load site configuration */
202bcbcc 217require(SM_PATH . 'config/config.php');
5e68a08e 218/* load local configuration overrides */
219if (file_exists(SM_PATH . 'config/config_local.php')) {
220 require(SM_PATH . 'config/config_local.php');
221}
222
1888b1bf 223
224/**
225 * Set PHP error reporting level based on the SquirrelMail debug mode
226 */
227$error_level = 0;
228if ($sm_debug_mode & SM_DEBUG_MODE_SIMPLE)
229 $error_level |= E_ERROR;
230if ($sm_debug_mode & SM_DEBUG_MODE_MODERATE
231 || $sm_debug_mode & SM_DEBUG_MODE_ADVANCED)
232 $error_level |= E_ALL;
233if ($sm_debug_mode & SM_DEBUG_MODE_STRICT)
234 $error_level |= E_STRICT;
235error_reporting($error_level);
236
237
8f557b94 238/**
239 * Detect SSL connections
240 */
241$is_secure_connection = is_ssl_secured_connection();
242
243
202bcbcc 244require(SM_PATH . 'functions/plugin.php');
202bcbcc 245require(SM_PATH . 'include/languages.php');
42b5e8aa 246require(SM_PATH . 'class/template/Template.class.php');
5ab684a5 247require(SM_PATH . 'class/error.class.php');
202bcbcc 248
249/**
250 * If magic_quotes_runtime is on, SquirrelMail breaks in new and creative ways.
251 * Force magic_quotes_runtime off.
252 * tassium@squirrelmail.org - I put it here in the hopes that all SM code includes this.
253 * If there's a better place, please let me know.
254 */
255ini_set('magic_quotes_runtime','0');
256
257
258/* if running with magic_quotes_gpc then strip the slashes
259 from POST and GET global arrays */
430a19f3 260if (function_exists('get_magic_quotes_gpc') && @get_magic_quotes_gpc()) {
202bcbcc 261 sqstripslashes($_GET);
262 sqstripslashes($_POST);
263}
264
202bcbcc 265
266/* strip any tags added to the url from PHP_SELF.
267This fixes hand crafted url XXS expoits for any
268 page that uses PHP_SELF as the FORM action */
269$_SERVER['PHP_SELF'] = strip_tags($_SERVER['PHP_SELF']);
270
271$PHP_SELF = php_self();
272
273/**
274 * Initialize the session
275 */
276
e8c4e350 277/** set the name of the session cookie */
278if (!isset($session_name) || !$session_name) {
279 $session_name = 'SQMSESSID';
280}
281
282/**
319ad3c0 283 * When session.auto_start is On we want to destroy/close the session
1d537493 284 */
285$sSessionAutostartName = session_name();
ccb5faf0 286$sSessionAutostartID = session_id();
287if (!empty($sSessionAutostartID) && $sSessionAutostartName !== $session_name) {
1d537493 288 $sCookiePath = ini_get('session.cookie_path');
289 $sCookieDomain = ini_get('session.cookie_domain');
e8c4e350 290 // reset the cookie
ccb5faf0 291 sqsetcookie($sSessionAutostartName,'',1,$sCookiePath,$sCookieDomain);
e8c4e350 292 @session_destroy();
293 session_write_close();
1d537493 294}
e8c4e350 295
202bcbcc 296/**
297 * includes from classes stored in the session
298 */
299require(SM_PATH . 'class/mime.class.php');
300
202bcbcc 301ini_set('session.name' , $session_name);
302session_set_cookie_params (0, $base_uri);
303sqsession_is_active();
304
202bcbcc 305/**
319ad3c0 306 * When on login page, have to reset the user session, making
307 * sure to save session restore data first
308 */
309if (PAGE_NAME == 'login') {
310 if (!sqGetGlobalVar('session_expired_post', $sep, SQ_SESSION))
311 $sep = '';
312 if (!sqGetGlobalVar('session_expired_location', $sel, SQ_SESSION))
313 $sel = '';
314 sqsession_destroy();
315 session_write_close();
316
317 /**
318 * in some rare instances, the session seems to stick
319 * around even after destroying it (!!), so if it does,
320 * we'll manually flatten the $_SESSION data
321 */
322 if (!empty($_SESSION))
323 $_SESSION = array();
324
bc3acc5a 325 /**
326 * Allow administrators to define custom session handlers
327 * for SquirrelMail without needing to change anything in
328 * php.ini (application-level).
329 *
330 * In config_local.php, admin needs to put:
331 *
332 * $custom_session_handlers = array(
333 * 'my_open_handler',
334 * 'my_close_handler',
335 * 'my_read_handler',
336 * 'my_write_handler',
337 * 'my_destroy_handler',
338 * 'my_gc_handler',
339 * );
340 * session_module_name('user');
341 * session_set_save_handler(
342 * $custom_session_handlers[0],
343 * $custom_session_handlers[1],
344 * $custom_session_handlers[2],
345 * $custom_session_handlers[3],
346 * $custom_session_handlers[4],
347 * $custom_session_handlers[5]
348 * );
349 *
350 * We need to replicate that code once here because PHP has
351 * long had a bug that resets the session handler mechanism
352 * when the session data is also destroyed. Because of this
353 * bug, even administrators who define custom session handlers
354 * via a PHP pre-load defined in php.ini (auto_prepend_file)
355 * will still need to define the $custom_session_handlers array
356 * in config_local.php.
357 */
358 global $custom_session_handlers;
359 if (!empty($custom_session_handlers)) {
360 $open = $custom_session_handlers[0];
361 $close = $custom_session_handlers[1];
362 $read = $custom_session_handlers[2];
363 $write = $custom_session_handlers[3];
364 $destroy = $custom_session_handlers[4];
365 $gc = $custom_session_handlers[5];
366 session_module_name('user');
367 session_set_save_handler($open, $close, $read, $write, $destroy, $gc);
368 }
369
319ad3c0 370 sqsession_is_active();
371 session_regenerate_id();
ef33def6 372
373 // put session restore data back into session if necessary
374 if (!empty($sel)) {
375 sqsession_register($sel, 'session_expired_location');
376 if (!empty($sep))
377 sqsession_register($sep, 'session_expired_post');
378 }
319ad3c0 379}
380
381/**
5aed95be 382 * SquirrelMail internal version number -- DO NOT CHANGE
383 * $sm_internal_version = array (release, major, minor)
384 */
a895042a 385$SQM_INTERNAL_VERSION = explode('.', SM_VERSION, 3);
b37e457f 386$SQM_INTERNAL_VERSION[2] = intval($SQM_INTERNAL_VERSION[2]);
5aed95be 387
93d67e0d 388
6d5775db 389/* load prefs system; even when user not logged in, should be OK to do this here */
390require(SM_PATH . 'functions/prefs.php');
391
6d5775db 392
086ad092 393/* if plugins are disabled only for one user and
93d67e0d 394 * the current user is NOT that user, turn them
395 * back on
396 */
0d56053e 397sqgetGlobalVar('username', $username, SQ_SESSION);
93d67e0d 398if ($disable_plugins && !empty($disable_plugins_user)
399 && $username != $disable_plugins_user) {
400 $disable_plugins = false;
401}
402
4a9f6063 403
93d67e0d 404/* remove all plugins if they are disabled */
405if ($disable_plugins) {
406 $plugins = array();
407}
408
409
5aed95be 410/**
411 * Include Compatibility plugin if available.
412 */
93d67e0d 413if (!$disable_plugins && file_exists(SM_PATH . 'plugins/compatibility/functions.php'))
5aed95be 414 include_once(SM_PATH . 'plugins/compatibility/functions.php');
415
4a9f6063 416
5aed95be 417/**
418 * MAIN PLUGIN LOADING CODE HERE
086ad092 419 * On init, we no longer need to load all plugin setup files.
5aed95be 420 * Now, we load the statically generated hook registrations here
421 * and let the hook calls include only the plugins needed.
422 */
423$squirrelmail_plugin_hooks = array();
93d67e0d 424if (!$disable_plugins && file_exists(SM_PATH . 'config/plugin_hooks.php')) {
4a9f6063 425//FIXME: if we keep the plugin hooks array static like this, it seems like we should also keep the template files list in a static file too (when a new user session is started or the template set is changed, the code will dynamically iterate through the directory heirarchy of the template directory and catalog all the template files therein (and store the "catalog" in PHP session) -- instead, we could do that once at config-time and keep that static so SM can just include the file just like the line below)
5aed95be 426 require(SM_PATH . 'config/plugin_hooks.php');
427}
428
4a9f6063 429
5aed95be 430/**
4a9f6063 431 * Plugin authors note that the "config_override" hook used to be
432 * executed here, but please adapt your plugin to use this "prefs_backend"
433 * hook instead, making sure that it does NOT return anything, since
434 * doing so will interfere with proper prefs system functionality.
435 * Of course, otherwise, this hook may be used to do any configuration
436 * overrides as needed, as well as set up a custom preferences backend.
5aed95be 437 */
4a9f6063 438$prefs_backend = do_hook('prefs_backend', $null);
439if (isset($prefs_backend) && !empty($prefs_backend) && file_exists(SM_PATH . $prefs_backend)) {
440 require(SM_PATH . $prefs_backend);
441} elseif (isset($prefs_dsn) && !empty($prefs_dsn)) {
442 require(SM_PATH . 'functions/db_prefs.php');
443} else {
444 require(SM_PATH . 'functions/file_prefs.php');
445}
446
447
5aed95be 448
449/**
3464e1f4 450 * DISABLED.
202bcbcc 451 * Remove globalized session data in rg=on setups
086ad092 452 *
3464e1f4 453 * Code can be utilized when session is started, but data is not loaded.
086ad092 454 * We have already loaded configuration and other important vars. Can't
aae60854 455 * clean session globals here, beside, the cleanout of globals at the
456 * top of this file will have removed anything this code would find anyway.
3464e1f4 457if ((bool) @ini_get('register_globals') &&
458 strtolower(ini_get('register_globals'))!='off') {
202bcbcc 459 foreach ($_SESSION as $key => $value) {
460 unset($GLOBALS[$key]);
461 }
462}
3464e1f4 463*/
6a2a6e44 464
826ddd72 465sqsession_register(SM_BASE_URI,'base_uri');
6a2a6e44 466
202bcbcc 467/**
468 * Retrieve the language cookie
469 */
470if (! sqgetGlobalVar('squirrelmail_language',$squirrelmail_language,SQ_COOKIE)) {
471 $squirrelmail_language = '';
472}
473
bf3abdc3 474
202bcbcc 475/**
775a1f52 476 * In some cases, buffering all output allows more complex functionality,
477 * especially for plugins that want to add headers on hooks that are beyond
478 * the point of output having been sent to the browser otherwise.
479 *
480 * Note that we don't turn this on any earlier since we want to allow plugins
481 * to turn it on themselves via a configuration override on the prefs_backend
482 * hook.
483 *
484 */
485if ($buffer_output) ob_start(!empty($buffered_output_handler) ? $buffered_output_handler : NULL);
486
487
488/**
f0d28f44 489 * Do something special for some pages. This is based on the PAGE_NAME constant
9e06a3ea 490 * set at the top of every page.
202bcbcc 491 */
0d56053e 492$set_up_langage_after_template_setup = FALSE;
9e06a3ea 493switch (PAGE_NAME) {
086ad092 494 case 'style':
c4e5f61f 495
2b26084f 496 // need to get the right template set up
28294310 497 //
498 sqGetGlobalVar('templateid', $templateid, SQ_GET);
c4e5f61f 499
2b26084f 500 // sanitize just in case...
28294310 501 //
502 $templateid = preg_replace('/(\.\.\/){1,}/', '', $templateid);
503
504 // make sure given template actually is available
505 //
28294310 506 $found_templateset = false;
507 for ($i = 0; $i < count($aTemplateSet); ++$i) {
508 if ($aTemplateSet[$i]['ID'] == $templateid) {
509 $found_templateset = true;
510 break;
511 }
512 }
c4e5f61f 513
be155e14 514// FIXME: do we need/want to check here for actual (physical) presence of template sets?
28294310 515 // selected template not available, fall back to default template
516 //
517 if (!$found_templateset) {
42b5e8aa 518 $sTemplateID = Template::get_default_template_set();
28294310 519 } else {
520 $sTemplateID = $templateid;
c4e5f61f 521 }
522
2b26084f 523 session_write_close();
c4e5f61f 524 break;
525
f0d28f44 526 case 'mailto':
527 // nothing to do
528 break;
529
202bcbcc 530 case 'redirect':
2e616fa4 531 require(SM_PATH . 'functions/auth.php');
202bcbcc 532 //nobreak;
bf3abdc3 533
202bcbcc 534 case 'login':
535 require(SM_PATH . 'functions/display_messages.php' );
536 require(SM_PATH . 'functions/page_header.php');
537 require(SM_PATH . 'functions/html.php');
42b5e8aa 538
539 // reset template file cache
540 //
541 $sTemplateID = Template::get_default_template_set();
d81572f7 542 Template::cache_template_file_hierarchy($sTemplateID, TRUE);
42b5e8aa 543
1d537493 544 /**
01fd1d1a 545 * Make sure icon variables are setup for the login page.
546 */
547 $icon_theme = $icon_themes[$icon_theme_def]['PATH'];
548 /*
549 * NOTE: The $icon_theme_path var should contain the path to the icon
550 * theme to use. If the admin has disabled icons, or the user has
551 * set the icon theme to "None," no icons will be used.
552 */
553 $icon_theme_path = (!$use_icons || $icon_theme=='none') ? NULL : ($icon_theme == 'template' ? SM_PATH . Template::calculate_template_images_directory($sTemplateID) : $icon_theme);
554
202bcbcc 555 break;
556 default:
557 require(SM_PATH . 'functions/display_messages.php' );
558 require(SM_PATH . 'functions/page_header.php');
559 require(SM_PATH . 'functions/html.php');
202bcbcc 560
561
562 /**
563 * Check if we are logged in
564 */
565 require(SM_PATH . 'functions/auth.php');
566
567 if ( !sqsession_is_registered('user_is_logged_in') ) {
f8eb968d 568
569 // use $message to indicate what logout text the user
570 // will see... if 0, typical "You must be logged in"
571 // if 1, information that the user session was saved
572 // and will be resumed after (re)login
573 //
574 $message = 0;
575
202bcbcc 576 // First we store some information in the new session to prevent
577 // information-loss.
578 //
579 $session_expired_post = $_POST;
f8e68605 580 $session_expired_location = PAGE_NAME;
202bcbcc 581 if (!sqsession_is_registered('session_expired_post')) {
582 sqsession_register($session_expired_post,'session_expired_post');
583 }
584 if (!sqsession_is_registered('session_expired_location')) {
585 sqsession_register($session_expired_location,'session_expired_location');
f8e68605 586 if ($session_expired_location == 'compose')
f8eb968d 587 $message = 1;
202bcbcc 588 }
589 // signout page will deal with users who aren't logged
590 // in on its own; don't show error here
591 //
9e06a3ea 592 if ( PAGE_NAME == 'signout' ) {
a140422a 593 return;
202bcbcc 594 }
595
8efadc6b 596 /**
597 * Initialize the template object (logout_error uses it)
598 */
8efadc6b 599 /*
086ad092 600 * $sTemplateID is not initialized when a user is not logged in, so we
601 * will use the config file defaults here. If the neccesary variables
d81572f7 602 * are not set, force a default value.
8efadc6b 603 */
d81572f7 604 if (PAGE_NAME == 'squirrelmail_rpc') {
605 $sTemplateID = Template::get_rpc_template_set();
606 } else {
607 $sTemplateID = Template::get_default_template_set();
608 }
28294310 609 $oTemplate = Template::construct_template($sTemplateID);
8efadc6b 610
202bcbcc 611 set_up_language($squirrelmail_language, true);
f8eb968d 612 if (!$message)
613 logout_error( _("You must be logged in to access this page.") );
614 else
615 logout_error( _("Your session has expired, but will be resumed after logging in again.") );
202bcbcc 616 exit;
617 }
618
79524620 619 sqgetGlobalVar('authz',$authz,SQ_SESSION);
202bcbcc 620
621 /**
622 * Setting the prefs backend
623 */
624 sqgetGlobalVar('prefs_cache', $prefs_cache, SQ_SESSION );
625 sqgetGlobalVar('prefs_are_cached', $prefs_are_cached, SQ_SESSION );
626
627 if ( !sqsession_is_registered('prefs_are_cached') ||
628 !isset( $prefs_cache) ||
629 !is_array( $prefs_cache)) {
630 $prefs_are_cached = false;
631 $prefs_cache = false; //array();
632 }
633
202bcbcc 634 /**
635 * initializing user settings
636 */
637 require(SM_PATH . 'include/load_prefs.php');
638
202bcbcc 639 /**
640 * We'll need this to later have a noframes version
641 *
642 * Check if the user has a language preference, but no cookie.
643 * Send him a cookie with his language preference, if there is
644 * such discrepancy.
645 */
646 $my_language = getPref($data_dir, $username, 'language');
647 if ($my_language != $squirrelmail_language) {
648 sqsetcookie('squirrelmail_language', $my_language, time()+2592000, $base_uri);
649 }
202bcbcc 650
0d56053e 651 $set_up_langage_after_template_setup = TRUE;
202bcbcc 652
653 $timeZone = getPref($data_dir, $username, 'timezone');
654
655 /* Check to see if we are allowed to set the TZ environment variable.
656 * We are able to do this if ...
657 * safe_mode is disabled OR
658 * safe_mode_allowed_env_vars is empty (you are allowed to set any) OR
659 * safe_mode_allowed_env_vars contains TZ
660 */
661 $tzChangeAllowed = (!ini_get('safe_mode')) ||
662 !strcmp(ini_get('safe_mode_allowed_env_vars'),'') ||
663 preg_match('/^([\w_]+,)*TZ/', ini_get('safe_mode_allowed_env_vars'));
664
665 if ( $timeZone != SMPREF_NONE && ($timeZone != "")
666 && $tzChangeAllowed ) {
667
668 // get time zone key, if strict or custom strict timezones are used
669 if (isset($time_zone_type) &&
670 ($time_zone_type == 1 || $time_zone_type == 3)) {
671 /* load time zone functions */
672 require(SM_PATH . 'include/timezones.php');
673 $realTimeZone = sq_get_tz_key($timeZone);
674 } else {
675 $realTimeZone = $timeZone;
676 }
677
678 // set time zone
679 if ($realTimeZone) {
680 putenv("TZ=".$realTimeZone);
681 }
682 }
867fed37 683
684 /**
685 * php 5.1.0 added time zone functions. Set time zone with them in order
686 * to prevent E_STRICT notices and allow time zone modifications in safe_mode.
687 */
688 if (function_exists('date_default_timezone_set')) {
689 if ($timeZone != SMPREF_NONE && $timeZone != "") {
690 date_default_timezone_set($timeZone);
691 } else {
692 // interface runs on server's time zone. Remove php E_STRICT complains
693 $default_timezone = @date_default_timezone_get();
086ad092 694 date_default_timezone_set($default_timezone);
867fed37 695 }
696 }
202bcbcc 697 break;
698}
699
202bcbcc 700/*
086ad092 701 * $sTemplateID is not initialized when a user is not logged in, so we
702 * will use the config file defaults here. If the neccesary variables
28294310 703 * are not set, force a default value.
086ad092 704 *
705 * If the user is logged in, $sTemplateID will be set in load_prefs.php,
28294310 706 * so we shouldn't change it here.
202bcbcc 707 */
28294310 708if (!isset($sTemplateID)) {
d81572f7 709 if (PAGE_NAME == 'squirrelmail_rpc') {
710 $sTemplateID = Template::get_rpc_template_set();
711 } else {
712 $sTemplateID = Template::get_default_template_set();
713 }
28294310 714 $icon_theme_path = !$use_icons ? NULL : Template::calculate_template_images_directory($sTemplateID);
3aa46abc 715}
be155e14 716
717// template object may have already been constructed in load_prefs.php
718//
719if (empty($oTemplate)) {
720 $oTemplate = Template::construct_template($sTemplateID);
721}
202bcbcc 722
7aae649d 723// We want some variables to always be available to the template
551c7b53 724//
e39d00e9 725$oTemplate->assign('javascript_on',
726 (sqGetGlobalVar('user_is_logged_in', $user_is_logged_in, SQ_SESSION)
727 ? checkForJavascript() : 0));
fe8103c2 728$oTemplate->assign('base_uri', sqm_baseuri());
457e8593 729$always_include = array('sTemplateID', 'icon_theme_path');
7aae649d 730foreach ($always_include as $var) {
731 $oTemplate->assign($var, (isset($$var) ? $$var : NULL));
732}
733
551c7b53 734// A few output elements are used often, so just get them once here
735//
736$nbsp = $oTemplate->fetch('non_breaking_space.tpl');
737$br = $oTemplate->fetch('line_break.tpl');
738
0d56053e 739
740/**
741 * Set up the language.
742 *
743 * This code block corresponds to the *default* block of the switch
744 * statement above, but the language cannot be set up until after the
745 * template is instantiated, so we set $set_up_langage_after_template_setup
746 * above and do the linguistic stuff now.
747 */
748if ($set_up_langage_after_template_setup) {
749 $err=set_up_language(getPref($data_dir, $username, 'language'));
750
751 // Japanese translation used without mbstring support
752 if ($err==2) {
753 $sError = "<p>Your administrator needs to have PHP installed with the multibyte string extension enabled (using configure option --enable-mbstring).</p>\n"
754 . "<p>This system has assumed that you accidently switched to Japanese and has reverted your language preference to English.</p>\n"
755 . "<p>Please refresh this page in order to continue using your webmail.</p>\n";
756 error_box($sError);
757 }
758}
759
760
202bcbcc 761/**
762 * Initialize our custom error handler object
763 */
202bcbcc 764$oErrorHandler = new ErrorHandler($oTemplate,'error_message.tpl');
765
0d56053e 766
202bcbcc 767/**
768 * Activate custom error handling
769 */
770if (version_compare(PHP_VERSION, "4.3.0", ">=")) {
771 $oldErrorHandler = set_error_handler(array($oErrorHandler, 'SquirrelMailErrorhandler'));
772} else {
773 $oldErrorHandler = set_error_handler('SquirrelMailErrorhandler');
774}
775
f0d28f44 776
777// ============================================================================
778// ================= End of Live Code, Beginning of Functions =================
779// ============================================================================
780
781
202bcbcc 782/**
783 * Javascript support detection function
784 * @param boolean $reset recheck javascript support if set to true.
867fed37 785 * @return integer SMPREF_JS_ON or SMPREF_JS_OFF ({@see include/constants.php})
202bcbcc 786 * @since 1.5.1
787 */
202bcbcc 788function checkForJavascript($reset = FALSE) {
789 global $data_dir, $username, $javascript_on, $javascript_setting;
790
791 if ( !$reset && sqGetGlobalVar('javascript_on', $javascript_on, SQ_SESSION) )
792 return $javascript_on;
793
e39d00e9 794 $user_is_logged_in = FALSE;
bf3abdc3 795 if ( $reset || !isset($javascript_setting) )
202bcbcc 796 $javascript_setting = getPref($data_dir, $username, 'javascript_setting', SMPREF_JS_AUTODETECT);
797
798 if ( !sqGetGlobalVar('new_js_autodetect_results', $js_autodetect_results) &&
799 !sqGetGlobalVar('js_autodetect_results', $js_autodetect_results) )
800 $js_autodetect_results = SMPREF_JS_OFF;
801
802 if ( $javascript_setting == SMPREF_JS_AUTODETECT )
803 $javascript_on = $js_autodetect_results;
804 else
805 $javascript_on = $javascript_setting;
806
807 sqsession_register($javascript_on, 'javascript_on');
808 return $javascript_on;
809}
810
811function sqm_baseuri() {
812 global $base_uri;
813 return $base_uri;
8e1e2794 814}