59177427 |
1 | <?php |
895905c0 |
2 | |
35586184 |
3 | /** |
4 | * download.php |
5 | * |
15e6162e |
6 | * Copyright (c) 1999-2002 The SquirrelMail Project Team |
35586184 |
7 | * Licensed under the GNU GPL. For full terms see the file COPYING. |
8 | * |
9 | * Handles attachment downloads to the users computer. |
10 | * Also allows displaying of attachments when possible. |
11 | * |
12 | * $Id$ |
13 | */ |
14 | |
35586184 |
15 | require_once('../src/validate.php'); |
16 | require_once('../functions/imap.php'); |
17 | require_once('../functions/mime.php'); |
18 | require_once('../functions/date.php'); |
6b96544a |
19 | |
65c3ec94 |
20 | header('Pragma: '); |
21 | header('Cache-Control: cache'); |
22 | |
0f859719 |
23 | function viewText($color, $body, $id, $entid, $mailbox, $type1, $wrap_at, $imapConnection) { |
65c3ec94 |
24 | global $where, $what, $charset; |
25 | global $startMessage; |
26 | |
27 | displayPageHeader($color, 'None'); |
28 | |
29 | echo "<BR><TABLE WIDTH=\"100%\" BORDER=0 CELLSPACING=0 CELLPADDING=2 ALIGN=CENTER><TR><TD BGCOLOR=\"$color[0]\">". |
30 | "<B><CENTER>". |
31 | _("Viewing a text attachment") . " - "; |
32 | if ($where && $what) { |
33 | // from a search |
34 | echo "<a href=\"read_body.php?mailbox=".urlencode($mailbox)."&passed_id=$id&where=".urlencode($where)."&what=".urlencode($what)."\">". _("View message") . "</a>"; |
35 | } else { |
36 | echo "<a href=\"read_body.php?mailbox=".urlencode($mailbox)."&passed_id=$id&startMessage=$startMessage&show_more=0\">". _("View message") . "</a>"; |
37 | } |
38 | |
39 | $urlmailbox = urlencode($mailbox); |
40 | echo "</b></td><tr><tr><td><CENTER><A HREF=\"../src/download.php?absolute_dl=true&passed_id=$id&passed_ent_id=$entid&mailbox=$urlmailbox\">". |
41 | _("Download this as a file"). |
42 | "</A></CENTER><BR>". |
43 | "</CENTER></B>". |
44 | "</TD></TR></TABLE>". |
45 | "<TABLE WIDTH=\"98%\" BORDER=0 CELLSPACING=0 CELLPADDING=2 ALIGN=CENTER><TR><TD BGCOLOR=\"$color[0]\">". |
46 | "<TR><TD BGCOLOR=\"$color[4]\"><TT>"; |
47 | |
48 | if ($type1 == 'html') { |
0f859719 |
49 | $msg = sqimap_get_message($imapConnection, $id, $mailbox); |
50 | $body = MagicHTML( $body, $id, $msg ); |
65c3ec94 |
51 | } else { |
52 | translateText($body, $wrap_at, $charset); |
53 | } |
54 | |
55 | flush(); |
56 | echo $body . |
57 | "</TT></TD></TR></TABLE>"; |
58 | } |
59 | |
13b13ded |
60 | function viewMessage($imapConnection, $id, $mailbox, $ent_id, $color, $wrap_at, $extracted) { |
97d7da3b |
61 | global $startMessage; |
247240ed |
62 | |
63 | |
64 | $msg = sqimap_get_message($imapConnection, $id, $mailbox); |
65 | $msg = getEntity($msg, $ent_id); |
66 | |
97d7da3b |
67 | $header = sqimap_get_ent_header($imapConnection,$id,$mailbox,$ent_id); |
13b13ded |
68 | $header->id = $id; |
97d7da3b |
69 | $msg->header = $header; |
0f859719 |
70 | |
71 | $ent_ar = findDisplayEntity($msg, 0); |
72 | $body = ''; |
73 | for ($i = 0; $i < count($ent_ar); $i++) { |
74 | $body .= formatBody($imapConnection, $msg, $color, $wrap_at, $ent_ar[$i], false); |
75 | } |
76 | |
97d7da3b |
77 | $bodyheader = viewHeader($header, $color); |
97d7da3b |
78 | displayPageHeader($color, 'None'); |
79 | |
13b13ded |
80 | echo "<BR><TABLE WIDTH=\"100%\" BORDER=0 CELLSPACING=0 CELLPADDING=2 ALIGN=CENTER>"; |
81 | if ($extracted) { |
82 | echo '<TR><TD width="100%"><center><h1>Message succesfully extracted</h1></center></TD></TR>'; |
83 | } |
84 | echo "<TR><TD BGCOLOR=\"$color[0]\">". |
97d7da3b |
85 | "<B><CENTER>". _("Viewing a message attachment") . " - "; |
86 | |
87 | echo "<a href=\"read_body.php?mailbox=".urlencode($mailbox)."&passed_id=$id&startMessage=$startMessage&show_more=0\">". _("View message") . "</a>"; |
88 | |
89 | $urlmailbox = urlencode($mailbox); |
90 | |
91 | echo "</b></td><tr><tr><td><CENTER><A HREF=\"../src/download.php?absolute_dl=true&passed_id=$id&passed_ent_id=$ent_id&mailbox=$urlmailbox\">". |
92 | _("Download this as a file"). |
93 | "</A></CENTER><BR>". |
94 | "</CENTER></B>". |
95 | "</TD></TR></TABLE>"; |
96 | echo "<TABLE WIDTH=\"100%\" BORDER=0 CELLSPACING=0 CELLPADDING=2 ALIGN=CENTER><TR><TD BGCOLOR=\"$color[0]\">". |
97 | "<TR><TD BGCOLOR=\"$color[4]\">"; |
98 | echo "$bodyheader </TD></TR></TABLE>"; |
99 | |
100 | echo "<TABLE WIDTH=\"98%\" BORDER=0 CELLSPACING=0 CELLPADDING=2 ALIGN=CENTER><TR><TD BGCOLOR=\"$color[0]\">". |
13b13ded |
101 | "<TR><TD BGCOLOR=\"$color[4]\"><TT><BR>"; |
102 | echo "$body </TT></TD></TR><table><br>"; |
103 | echo '<table width="100%"><tr>'. |
104 | "<td bgcolor=\"$color[9]\" width=\"100%\" align=\"center\">". |
105 | '<form action="download.php" method="post"><small>'. |
106 | "<input type=\"hidden\" name=\"passed_id\" value=\"$id\">". |
107 | "<input type=\"hidden\" name=\"mailbox\" value=\"".$mailbox."\">". |
108 | "<input type=\"hidden\" name=\"startMessage\" value=\"$startMessage\">". |
109 | "<input type=\"hidden\" name=\"passed_ent_id\" value=\"$ent_id\">". |
110 | "<input type=\"hidden\" name=\"extract_message\" value=\"1\">". |
111 | _("Save to:") . |
112 | ' <select name="targetMailbox">'; |
113 | get_extract_to_target_list($imapConnection); |
114 | echo '</select> '.' '. |
115 | '<input type="submit" value="' . _("Extract") . '">'. |
116 | '</small>'. |
117 | '</form>'. |
118 | '</td></table>'; |
119 | |
120 | } |
121 | |
122 | function get_extract_to_target_list($imapConnection) { |
123 | |
124 | $boxes = sqimap_mailbox_list($imapConnection); |
125 | for ($i = 0; $i < count($boxes); $i++) { |
126 | if (!in_array('noselect', $boxes[$i]['flags'])) { |
127 | $box = $boxes[$i]['unformatted']; |
128 | $box2 = str_replace(' ', ' ', $boxes[$i]['unformatted-disp']); |
129 | if ( $box2 == 'INBOX' ) { |
130 | $box2 = _("INBOX"); |
131 | } |
132 | echo "<option value=\"$box\">$box2</option>\n"; |
133 | } |
134 | } |
97d7da3b |
135 | } |
136 | |
137 | |
138 | function viewHeader($header,$color) { |
139 | |
140 | $bodyheader = ''; |
141 | |
142 | /** FORMAT THE FROM STRING **/ |
143 | $from_name = decodeHeader(htmlspecialchars($header->from)); |
144 | if(isset($from_name) && $from_name !='') { |
145 | $bodyheader .= makeTableEntry($from_name,_("From"), $color); |
146 | } |
147 | |
148 | $subject_string = decodeHeader(htmlspecialchars($header->subject)); |
149 | if(isset($subject_string) && $subject_string !='') { |
150 | $bodyheader .= makeTableEntry($subject_string,_("Subject:"), $color); |
151 | } |
152 | /** FORMAT THE TO STRING **/ |
153 | $to = formatRecipientString($header->to, "to"); |
154 | $to_string = $to['str']; |
155 | $url_to_string = $to['url_str']; |
156 | if(isset($to_string) && $to_string !='') { |
157 | $bodyheader .= makeTableEntry($to_string,_("To:"), $color); |
158 | } |
159 | |
160 | /** FORMAT THE DATE STRING **/ |
161 | $dateString = getLongDateString($header->date); |
162 | if(isset($dateString) && $dateString !='') { |
163 | $bodyheader .= makeTableEntry($dateString,_("Date:"), $color); |
164 | } |
165 | |
166 | /** FORMAT THE CC STRING **/ |
167 | $cc = formatRecipientString($header->cc, "cc"); |
168 | $cc_string = $cc['str']; |
169 | $url_cc_string = $cc['url_str']; |
170 | if(isset($cc_string) && $cc_string !='') { |
171 | $bodyheader .= makeTableEntry($cc_string,_("Cc:"), $color); |
172 | } |
173 | |
174 | /** FORMAT THE BCC STRING **/ |
175 | $bcc = formatRecipientString($header->bcc, "bcc"); |
176 | $bcc_string = $bcc['str']; |
177 | $url_bcc_string = $bcc['url_str']; |
178 | if(isset($bcc_string) && $bcc_string !='') { |
179 | $bodyheader .= makeTableEntry($bcc_string,_("Bcc:"), $color); |
180 | } |
181 | |
182 | return $bodyheader; |
183 | } |
184 | |
185 | function makeTableEntry($str, $str_name, $color) { |
186 | $entry = '<tr><td bgcolor="'."$color[0]".'" align right valign top>'."$str_name".'</td><td bgcolor="'."$color[0]". |
187 | '" valign top colspan=2><b>'."$str".'</b> </td></tr>'."\n"; |
188 | return $entry; |
189 | } |
190 | |
191 | function formatRecipientString($recipients, $item ) { |
192 | global $base_uri, $passed_id, $startMessage, $show_more_cc, $show_more, $show_more_bcc, $passed_ent_id; |
193 | global $where, $what, $mailbox, $sort; |
194 | |
195 | /** TEXT STRINGS DEFINITIONS **/ |
196 | $echo_more = _("more"); |
197 | $echo_less = _("less"); |
198 | |
199 | if (!isset($show_more_cc)) { |
200 | $show_more_cc = FALSE; |
201 | } |
202 | if (!isset($show_more_bcc)) { |
203 | $show_more_bcc = FALSE; |
204 | } |
205 | |
206 | |
207 | $urlMailbox = urlencode($mailbox); |
208 | $i = 0; |
209 | $url_string = ''; |
210 | |
211 | if (isset ($recipients[0]) && trim($recipients[0])) { |
212 | $string = ''; |
213 | $ary = explode(",",$recipients[0]); |
214 | |
215 | switch ($item) { |
216 | case 'to': |
217 | $show = "&show_more=1&show_more_cc=$show_more_cc&show_more_bcc=$show_more_bcc"; |
218 | $show_n = "&show_more=0&show_more_cc=$show_more_cc&show_more_bcc=$show_more_bcc"; |
219 | break; |
220 | case 'cc': |
221 | $show = "&show_more=$show_more&show_more_cc=1&show_more_bcc=$show_more_bcc"; |
222 | $show_n = "&show_more=$show_more&show_more_cc=0&show_more_bcc=$show_more_bcc"; |
223 | $show_more = $show_more_cc; |
224 | break; |
225 | case 'bcc': |
226 | $show = "&show_more=$show_more&show_more_cc=$show_more_cc&show_more_bcc=1"; |
227 | $show_n = "&show_more=$show_more&show_more_cc=$show_more_cc&show_more_bcc=0"; |
228 | $show_more = $show_more_bcc; |
229 | break; |
230 | default: |
231 | $break; |
232 | } |
233 | |
234 | while ($i < count($ary)) { |
235 | $ary[$i] = htmlspecialchars(decodeHeader($ary[$i])); |
236 | $url_string .= $ary[$i]; |
237 | if ($string) { |
238 | $string = "$string<BR>$ary[$i]"; |
239 | } else { |
240 | $string = "$ary[$i]"; |
241 | } |
242 | |
243 | $i++; |
244 | if (count($ary) > 1) { |
245 | if ($show_more == false) { |
246 | if ($i == 1) { |
247 | |
248 | $string .= ' (<A HREF="' . $base_uri . |
249 | "src/download.php?mailbox=$urlMailbox&passed_id=$passed_id&"; |
250 | if (isset($where) && isset($what)) { |
251 | $string .= 'what=' . urlencode($what)."&where=".urlencode($where)."&passed_ent_id=$passed_ent_id$show\">$echo_more</A>)"; |
252 | } else { |
253 | $string .= "sort=$sort&startMessage=$startMessage"."&passed_ent_id=$passed_ent_id$show\">$echo_more</A>)"; |
254 | } |
255 | $i = count($ary); |
256 | } |
257 | } else if ($i == 1) { |
258 | |
259 | $string .= ' (<A HREF="' . $base_uri . |
260 | "src/download.php?mailbox=$urlMailbox&passed_id=$passed_id&"; |
261 | if (isset($where) && isset($what)) { |
262 | $string .= 'what=' . urlencode($what)."&where=".urlencode($where)."&passed_ent_id=$passed_ent_id$show_n\">$echo_less</A>)"; |
263 | } else { |
264 | $string .= "sort=$sort&startMessage=$startMessage"."&passed_ent_id=$passed_ent_id$show_n\">$echo_less</A>)"; |
265 | } |
266 | } |
267 | } |
268 | |
269 | } |
270 | } |
271 | else { |
272 | $string = ''; |
273 | } |
274 | $url_string = urlencode($url_string); |
275 | $result = array(); |
276 | $result['str'] = $string; |
277 | $result['url_str'] = $url_string; |
278 | return $result; |
279 | |
280 | } |
281 | |
282 | |
65c3ec94 |
283 | $imapConnection = sqimap_login($username, $key, $imapServerAddress, $imapPort, 0); |
284 | sqimap_mailbox_select($imapConnection, $mailbox); |
285 | |
13b13ded |
286 | $extracted = false; |
287 | if (isset($extract_message) && $extract_message) { |
288 | $cmd = "FETCH $passed_id BODY[$passed_ent_id]"; |
3364587e |
289 | $read = sqimap_run_command ($imapConnection, $cmd, true, $response, $message); |
13b13ded |
290 | $cnt = count($read); |
291 | $body = ''; |
292 | $length = 0; |
293 | for ($i=1;$i<$cnt;$i++) { |
294 | $length = $length + strlen($read[$i]); |
295 | $body .= $read[$i]; |
296 | } |
297 | if (isset($targetMailbox) && $length>0) { |
298 | sqimap_append ($imapConnection, $targetMailbox, $length); |
299 | fputs($imapConnection,$body); |
300 | sqimap_append_done ($imapConnection); |
301 | $extracted = true; |
302 | } |
303 | } |
304 | |
247240ed |
305 | if (isset($showHeaders)) { |
306 | $top_header = sqimap_get_message_header ($imapConnection, $passed_id, $mailbox); |
307 | } |
65c3ec94 |
308 | /* |
309 | * lets redefine message as this particular entity that we wish to display. |
310 | * it should hold only the header for this entity. We need to fetch the body |
311 | * yet before we can display anything. |
312 | */ |
65c3ec94 |
313 | |
247240ed |
314 | $header = sqimap_get_mime_ent_header ($imapConnection, $passed_id, $mailbox, $passed_ent_id); |
315 | $header->entity_id = $passed_ent_id; |
316 | $header->mailbox = $mailbox; |
65c3ec94 |
317 | |
318 | $charset = $header->charset; |
319 | $type0 = $header->type0; |
320 | $type1 = $header->type1; |
321 | if (isset($override_type0)) { |
322 | $type0 = $override_type0; |
323 | } |
324 | if (isset($override_type1)) { |
325 | $type1 = $override_type1; |
326 | } |
327 | $filename = decodeHeader($header->filename); |
328 | if (!$filename) { |
329 | $filename = decodeHeader($header->name); |
330 | } |
331 | |
332 | if (strlen($filename) < 1) { |
333 | if ($type1 == 'plain' && $type0 == 'text') { |
334 | $suffix = 'txt'; |
335 | } else if ($type1 == 'richtext' && $type0 == 'text') { |
336 | $suffix = 'rtf'; |
337 | } else if ($type1 == 'postscript' && $type0 == 'application') { |
338 | $suffix = 'ps'; |
97d7da3b |
339 | } else if ($type1 == 'rfc822' && $type0 == 'message') { |
340 | $suffix = 'eml'; |
65c3ec94 |
341 | } else { |
342 | $suffix = $type1; |
343 | } |
344 | |
345 | $filename = "untitled$passed_ent_id.$suffix"; |
346 | } |
347 | |
97d7da3b |
348 | |
65c3ec94 |
349 | /* |
350 | * Note: |
351 | * The following sections display the attachment in different |
352 | * ways depending on how they choose. The first way will download |
353 | * under any circumstance. This sets the Content-type to be |
354 | * applicatin/octet-stream, which should be interpreted by the |
355 | * browser as "download me". |
356 | * The second method (view) is used for images or other formats |
357 | * that should be able to be handled by the browser. It will |
358 | * most likely display the attachment inline inside the browser. |
359 | * And finally, the third one will be used by default. If it |
360 | * is displayable (text or html), it will load them up in a text |
361 | * viewer (built in to squirrelmail). Otherwise, it sets the |
362 | * content-type as application/octet-stream |
363 | */ |
364 | if (isset($absolute_dl) && $absolute_dl == 'true') { |
365 | switch($type0) { |
366 | case 'text': |
367 | DumpHeaders($type0, $type1, $filename, 1); |
368 | $body = mime_fetch_body($imapConnection, $passed_id, $passed_ent_id); |
369 | $body = decodeBody($body, $header->encoding); |
370 | if ($type1 == 'plain' && isset($showHeaders)) { |
371 | echo _("Subject") . ": " . decodeHeader($top_header->subject) . "\n". |
372 | " " . _("From") . ": " . decodeHeader($top_header->from) . "\n". |
373 | " " . _("To") . ": " . decodeHeader(getLineOfAddrs($top_header->to)) . "\n". |
374 | " " . _("Date") . ": " . getLongDateString($top_header->date) . "\n\n"; |
375 | } elseif ($type1 == 'html' && isset($showHeaders)) { |
376 | echo '<table><tr><th align=right>' . _("Subject"). |
377 | ':</th><td>' . decodeHeader($top_header->subject). |
378 | "</td></tr>\n<tr><th align=right>" . _("From"). |
379 | ':</th><td>' . decodeHeader($top_header->from). |
380 | "</td></tr>\n<tr><th align=right>" . _("To"). |
381 | ':</th><td>' . decodeHeader(getLineOfAddrs($top_header->to)). |
382 | "</td></tr>\n<tr><th align=right>" . _("Date"). |
383 | ':</th><td>' . getLongDateString($top_header->date). |
384 | "</td></tr>\n</table>\n<hr>\n"; |
97d7da3b |
385 | } |
65c3ec94 |
386 | echo $body; |
387 | break; |
97d7da3b |
388 | |
65c3ec94 |
389 | default: |
390 | DumpHeaders($type0, $type1, $filename, 1); |
391 | mime_print_body_lines ($imapConnection, $passed_id, $passed_ent_id, $header->encoding); |
392 | break; |
393 | } |
394 | } else { |
395 | switch ($type0) { |
396 | case 'text': |
397 | if ($type1 == 'plain' || $type1 == 'html') { |
beb9e459 |
398 | $body = mime_fetch_body($imapConnection, $passed_id, $passed_ent_id); |
8beafbbc |
399 | $body = decodeBody($body, $header->encoding); |
0f859719 |
400 | viewText($color, $body, $passed_id, $passed_ent_id, $mailbox, $type1, $wrap_at, $imapConnection); |
65c3ec94 |
401 | } else { |
402 | DumpHeaders($type0, $type1, $filename, 0); |
beb9e459 |
403 | $body = mime_fetch_body($imapConnection, $passed_id, $passed_ent_id); |
8beafbbc |
404 | $body = decodeBody($body, $header->encoding); |
65c3ec94 |
405 | echo $body; |
406 | } |
407 | break; |
408 | case 'message': |
97d7da3b |
409 | if ($type1 == 'rfc822' ) { |
13b13ded |
410 | viewMessage($imapConnection, $passed_id, $mailbox, $passed_ent_id, $color, $wrap_at, $extracted); |
97d7da3b |
411 | } else { |
412 | $body = mime_fetch_body($imapConnection, $passed_id, $passed_ent_id); |
413 | $body = decodeBody($body, $msgheader->encoding); |
0f859719 |
414 | viewText($color, $body, $passed_id, $passed_ent_id, $mailbox, $type1, $wrap_at, $imapConnection); |
97d7da3b |
415 | } |
65c3ec94 |
416 | break; |
417 | default: |
418 | DumpHeaders($type0, $type1, $filename, 0); |
419 | mime_print_body_lines ($imapConnection, $passed_id, $passed_ent_id, $header->encoding); |
420 | break; |
421 | } |
422 | } |
423 | |
424 | |
425 | /* |
426 | * This function is verified to work with Netscape and the *very latest* |
427 | * version of IE. I don't know if it works with Opera, but it should now. |
428 | */ |
429 | function DumpHeaders($type0, $type1, $filename, $force) { |
430 | global $HTTP_USER_AGENT; |
431 | |
432 | $isIE = 0; |
97d7da3b |
433 | |
65c3ec94 |
434 | if (strstr($HTTP_USER_AGENT, 'compatible; MSIE ') !== false && |
435 | strstr($HTTP_USER_AGENT, 'Opera') === false) { |
36294f1a |
436 | $isIE = 1; |
65c3ec94 |
437 | } |
438 | |
97d7da3b |
439 | if (strstr($HTTP_USER_AGENT, 'compatible; MSIE 6') !== false && |
440 | strstr($HTTP_USER_AGENT, 'Opera') === false) { |
441 | $isIE6 = 1; |
442 | } |
443 | |
65c3ec94 |
444 | $filename = ereg_replace('[^-a-zA-Z0-9\.]', '_', $filename); |
445 | |
446 | // A Pox on Microsoft and it's Office! |
447 | if (! $force) { |
448 | // Try to show in browser window |
449 | header("Content-Disposition: inline; filename=\"$filename\""); |
450 | header("Content-Type: $type0/$type1; name=\"$filename\""); |
451 | } else { |
452 | // Try to pop up the "save as" box |
453 | // IE makes this hard. It pops up 2 save boxes, or none. |
454 | // http://support.microsoft.com/support/kb/articles/Q238/5/88.ASP |
455 | // But, accordint to Microsoft, it is "RFC compliant but doesn't |
456 | // take into account some deviations that allowed within the |
457 | // specification." Doesn't that mean RFC non-compliant? |
458 | // http://support.microsoft.com/support/kb/articles/Q258/4/52.ASP |
459 | // |
460 | // The best thing you can do for IE is to upgrade to the latest |
461 | // version |
97d7da3b |
462 | if ($isIE && !isset($isIE6)) { |
65c3ec94 |
463 | // http://support.microsoft.com/support/kb/articles/Q182/3/15.asp |
464 | // Do not have quotes around filename, but that applied to |
465 | // "attachment"... does it apply to inline too? |
466 | // |
467 | // This combination seems to work mostly. IE 5.5 SP 1 has |
468 | // known issues (see the Microsoft Knowledge Base) |
469 | header("Content-Disposition: inline; filename=$filename"); |
470 | |
471 | // This works for most types, but doesn't work with Word files |
472 | header("Content-Type: application/download; name=\"$filename\""); |
473 | |
474 | // These are spares, just in case. :-) |
475 | //header("Content-Type: $type0/$type1; name=\"$filename\""); |
476 | //header("Content-Type: application/x-msdownload; name=\"$filename\""); |
477 | //header("Content-Type: application/octet-stream; name=\"$filename\""); |
478 | } else { |
479 | header("Content-Disposition: attachment; filename=\"$filename\""); |
480 | // application/octet-stream forces download for Netscape |
481 | header("Content-Type: application/octet-stream; name=\"$filename\""); |
482 | } |
483 | } |
484 | } |
35586184 |
485 | ?> |