functions/smtp.php

   1 <?php
   2    /** smtp.php
   3     **
   4     ** This contains all the functions needed to send messages through
   5     ** an smtp server or sendmail.
   6     **/
   7
   8    $smtp_php = true;
   9
  10    // This should most probably go to some initialization...
  11    if (ereg("^([^@%/]+)[@%/](.+)$", $username, $usernamedata)) {
  12       $popuser = $usernamedata[1];
  13       $domain  = $usernamedata[2];
  14           unset($usernamedata);
  15    } else {
  16       $popuser = $username;
  17    }
  18    // We need domain for smtp
  19    if (!$domain)
  20       $domain = getenv("HOSTNAME");
  21
  22    // Returns true only if this message is multipart
  23    function isMultipart () {
  24       global $attachments;
  25
  26       if (count($attachments)>0)
  27          return true;
  28       else
  29          return false;
  30    }
  31
  32    // Attach the files that are due to be attached
  33    function attachFiles ($fp) {
  34       global $attachments, $attachment_dir;
  35
  36       $length = 0;
  37
  38       if (isMultipart()) {
  39          reset($attachments);
  40          while (list($localname, $remotename) = each($attachments)) {
  41             // This is to make sure noone is giving a filename in another
  42             // directory
  43             $localname = ereg_replace ("\\/", "", $localname);
  44
  45             $fileinfo = fopen ($attachment_dir.$localname.".info", "r");
  46             $filetype = fgets ($fileinfo, 8192);
  47             fclose ($fileinfo);
  48             $filetype = trim ($filetype);
  49             if ($filetype=="")
  50                $filetype = "application/octet-stream";
  51
  52             $header = "--".mimeBoundary()."\r\n";
  53             $header .= "Content-Type: $filetype;name=\"$remotename\"\r\n";
  54             $header .= "Content-Disposition: attachment; filename=\"$remotename\"\r\n";
  55             $header .= "Content-Transfer-Encoding: base64\r\n\r\n";
  56             fputs ($fp, $header);
  57             $length += strlen($header);
  58
  59             $file = fopen ($attachment_dir.$localname, "r");
  60             while ($tmp = fread($file, 570)) {
  61                $encoded = chunk_split(base64_encode($tmp));
  62                $length += strlen($encoded);
  63                fputs ($fp, $encoded);
  64             }
  65             fclose ($file);
  66          }
  67       }
  68
  69       return $length;
  70    }
  71
  72    // Delete files that are uploaded for attaching
  73    function deleteAttachments() {
  74       global $attachments, $attachment_dir;
  75
  76       if (isMultipart()) {
  77          reset($attachments);
  78          while (list($localname, $remotename) = each($attachments)) {
  79             if (!ereg ("\\/", $localname)) {
  80                unlink ($attachment_dir.$localname);
  81                unlink ($attachment_dir.$localname.".info");
  82             }
  83          }
  84       }
  85    }
  86
  87    // Return a nice MIME-boundary
  88    function mimeBoundary () {
  89       static $mimeBoundaryString;
  90
  91       if ($mimeBoundaryString == "") {
  92          $mimeBoundaryString = GenerateRandomString(70, '\'()+,-./:=?_', 7);
  93       }
  94
  95       return $mimeBoundaryString;
  96    }
  97
  98    /* Time offset for correct timezone */
  99    function timezone () {
 100       global $invert_time;
 101
 102       $diff_second = date("Z");
 103       if ($invert_time)
 104           $diff_second = - $diff_second;
 105       if ($diff_second > 0)
 106          $sign = "+";
 107       else
 108          $sign = "-";
 109
 110       $diff_second = abs($diff_second);
 111
 112       $diff_hour = floor ($diff_second / 3600);
 113       $diff_minute = floor (($diff_second-3600*$diff_hour) / 60);
 114
 115       $zonename = "(".strftime("%Z").")";
 116       $result = sprintf ("%s%02d%02d %s", $sign, $diff_hour, $diff_minute, $zonename);
 117       return ($result);
 118    }
 119
 120    /* Print all the needed RFC822 headers */
 121    function write822Header ($fp, $t, $c, $b, $subject, $more_headers) {
 122       global $REMOTE_ADDR, $SERVER_NAME, $REMOTE_PORT;
 123       global $data_dir, $username, $popuser, $domain, $version, $useSendmail;
 124       global $default_charset, $HTTP_VIA, $HTTP_X_FORWARDED_FOR;
 125       global $REMOTE_HOST;
 126
 127       // Storing the header to make sure the header is the same
 128       // everytime the header is printed.
 129       static $header, $headerlength;
 130
 131       if ($header == "") {
 132          $to = parseAddrs($t);
 133          $cc = parseAddrs($c);
 134          $bcc = parseAddrs($b);
 135          $reply_to = getPref($data_dir, $username, "reply_to");
 136          $from = getPref($data_dir, $username, "full_name");
 137          $from_addr = getPref($data_dir, $username, "email_address");
 138
 139          if ($from_addr == "")
 140             $from_addr = $popuser."@".$domain;
 141
 142          $to_list = getLineOfAddrs($to);
 143          $cc_list = getLineOfAddrs($cc);
 144          $bcc_list = getLineOfAddrs($bcc);
 145
 146          /* Encoding 8-bit characters and making from line */
 147          $subject = sqStripSlashes(encodeHeader($subject));
 148          if ($from == "")
 149             $from = "<$from_addr>";
 150          else
 151             $from = "\"" . encodeHeader($from) . "\" <$from_addr>";
 152
 153          /* This creates an RFC 822 date */
 154          $date = date("D, j M Y H:i:s ", mktime()) . timezone();
 155
 156          /* Create a message-id */
 157          $message_id = "<" . $REMOTE_PORT . "." . $REMOTE_ADDR . ".";
 158          $message_id .= time() . ".squirrel@" . $SERVER_NAME .">";
 159
 160          /* Make an RFC822 Received: line */
 161          if (isset($REMOTE_HOST))
 162             $received_from = "$REMOTE_HOST ([$REMOTE_ADDR])";
 163          else
 164             $received_from = $REMOTE_ADDR;
 165
 166          if (isset($HTTP_VIA) || isset ($HTTP_X_FORWARDED_FOR)) {
 167             if ($HTTP_X_FORWARDED_FOR == "")
 168                $HTTP_X_FORWARDED_FOR = "unknown";
 169             $received_from .= " (proxying for $HTTP_X_FORWARDED_FOR)";
 170          }
 171
 172          $header  = "Received: from $received_from\r\n";
 173          $header .= "        (SquirrelMail authenticated user $username)\r\n";
 174          $header .= "        by $SERVER_NAME with HTTP;\r\n";
 175          $header .= "        $date\r\n";
 176
 177          /* Insert the rest of the header fields */
 178          $header .= "Message-ID: $message_id\r\n";
 179          $header .= "Date: $date\r\n";
 180          $header .= "Subject: $subject\r\n";
 181          $header .= "From: $from\r\n";
 182          $header .= "To: $to_list \r\n";    // Who it's TO
 183
 184          /* Insert headers from the $more_headers array */
 185          if(is_array($more_headers)) {
 186             reset($more_headers);
 187             while(list($h_name, $h_val) = each($more_headers)) {
 188                $header .= sprintf("%s: %s\r\n", $h_name, $h_val);
 189             }
 190          }
 191
 192          if ($cc_list) {
 193             $header .= "Cc: $cc_list\r\n"; // Who the CCs are
 194          }
 195
 196          if ($reply_to != "")
 197             $header .= "Reply-To: $reply_to\r\n";
 198
 199          if ($useSendmail) {
 200             if ($bcc_list) {
 201                // BCCs is removed from header by sendmail
 202                $header .= "Bcc: $bcc_list\r\n";
 203             }
 204          }
 205
 206          $header .= "X-Mailer: SquirrelMail (version $version)\r\n"; // Identify SquirrelMail
 207
 208          // Do the MIME-stuff
 209          $header .= "MIME-Version: 1.0\r\n";
 210
 211          if (isMultipart()) {
 212             $header .= "Content-Type: multipart/mixed; boundary=\"";
 213             $header .= mimeBoundary();
 214             $header .= "\"\r\n";
 215          } else {
 216             if ($default_charset != "")
 217                $header .= "Content-Type: text/plain; charset=$default_charset\r\n";
 218             else
 219                $header .= "Content-Type: text/plain;\r\n";
 220             $header .= "Content-Transfer-Encoding: 8bit\r\n";
 221          }
 222          $header .= "\r\n"; // One blank line to separate header and body
 223
 224          $headerlength = strlen($header);
 225       }
 226
 227       // Write the header
 228       fputs ($fp, $header);
 229
 230       return $headerlength;
 231    }
 232
 233    // Send the body
 234    function writeBody ($fp, $passedBody) {
 235       global $default_charset;
 236
 237       $attachmentlength = 0;
 238
 239       if (isMultipart()) {
 240          $body = "--".mimeBoundary()."\r\n";
 241
 242          if ($default_charset != "")
 243             $body .= "Content-Type: text/plain; charset=$default_charset\r\n";
 244          else
 245             $body .= "Content-Type: text/plain\r\n";
 246
 247          $body .= "Content-Transfer-Encoding: 8bit\r\n\r\n";
 248          $body .= sqStripSlashes($passedBody) . "\r\n\r\n";
 249          fputs ($fp, $body);
 250
 251          $attachmentlength = attachFiles($fp);
 252
 253          $postbody .= "\r\n--".mimeBoundary()."--\r\n\r\n";
 254          fputs ($fp, $postbody);
 255       } else {
 256          $body = sqStripSlashes($passedBody) . "\r\n";
 257          fputs ($fp, $body);
 258          $postbody = "\r\n";
 259          fputs ($fp, $postbody);
 260       }
 261
 262       return (strlen($body) + strlen($postbody) + $attachmentlength);
 263    }
 264
 265    // Send mail using the sendmail command
 266    function sendSendmail($t, $c, $b, $subject, $body, $more_headers) {
 267       global $sendmail_path, $popuser, $username, $domain;
 268
 269       // Build envelope sender address. Make sure it doesn't contain
 270       // spaces or other "weird" chars that would allow a user to
 271       // exploit the shell/pipe it is used in.
 272       $envelopefrom = "$popuser@$domain";
 273       $envelopefrom = ereg_replace("[[:blank:]]","", $envelopefrom);
 274       $envelopefrom = ereg_replace("[[:space:]]","", $envelopefrom);
 275       $envelopefrom = ereg_replace("[[:cntrl:]]","", $envelopefrom);
 276
 277       // open pipe to sendmail
 278       $fp = popen (escapeshellcmd("$sendmail_path -t -f$envelopefrom"), "w");
 279
 280       $headerlength = write822Header ($fp, $t, $c, $b, $subject, $more_headers);
 281       $bodylength = writeBody($fp, $body);
 282
 283       pclose($fp);
 284
 285       return ($headerlength + $bodylength);
 286    }
 287
 288    function smtpReadData($smtpConnection) {
 289       $read = fgets($smtpConnection, 1024);
 290       $counter = 0;
 291       while ($read) {
 292          echo $read . "<BR>";
 293          $data[$counter] = $read;
 294          $read = fgets($smtpConnection, 1024);
 295          $counter++;
 296       }
 297    }
 298
 299    function sendSMTP($t, $c, $b, $subject, $body, $more_headers) {
 300       global $username, $popuser, $domain, $version, $smtpServerAddress, $smtpPort,
 301          $data_dir, $color;
 302
 303       $to = parseAddrs($t);
 304       $cc = parseAddrs($c);
 305       $bcc = parseAddrs($b);
 306       $from_addr = getPref($data_dir, $username, "email_address");
 307
 308       if (!$from_addr)
 309          $from_addr = "$popuser@$domain";
 310
 311       $smtpConnection = fsockopen($smtpServerAddress, $smtpPort, $errorNumber, $errorString);
 312       if (!$smtpConnection) {
 313          echo "Error connecting to SMTP Server.<br>";
 314          echo "$errorNumber : $errorString<br>";
 315          exit;
 316       }
 317       $tmp = fgets($smtpConnection, 1024);
 318       errorCheck($tmp, $smtpConnection);
 319
 320       $to_list = getLineOfAddrs($to);
 321       $cc_list = getLineOfAddrs($cc);
 322
 323       /** Lets introduce ourselves */
 324       fputs($smtpConnection, "HELO $domain\r\n");
 325       $tmp = fgets($smtpConnection, 1024);
 326       errorCheck($tmp, $smtpConnection);
 327
 328       /** Ok, who is sending the message? */
 329       fputs($smtpConnection, "MAIL FROM:<$from_addr>\r\n");
 330       $tmp = fgets($smtpConnection, 1024);
 331       errorCheck($tmp, $smtpConnection);
 332
 333       /** send who the recipients are */
 334       for ($i = 0; $i < count($to); $i++) {
 335          fputs($smtpConnection, "RCPT TO:<$to[$i]>\r\n");
 336          $tmp = fgets($smtpConnection, 1024);
 337          errorCheck($tmp, $smtpConnection);
 338       }
 339       for ($i = 0; $i < count($cc); $i++) {
 340          fputs($smtpConnection, "RCPT TO:<$cc[$i]>\r\n");
 341          $tmp = fgets($smtpConnection, 1024);
 342          errorCheck($tmp, $smtpConnection);
 343       }
 344       for ($i = 0; $i < count($bcc); $i++) {
 345          fputs($smtpConnection, "RCPT TO:<$bcc[$i]>\r\n");
 346          $tmp = fgets($smtpConnection, 1024);
 347          errorCheck($tmp, $smtpConnection);
 348       }
 349
 350       /** Lets start sending the actual message */
 351       fputs($smtpConnection, "DATA\r\n");
 352       $tmp = fgets($smtpConnection, 1024);
 353       errorCheck($tmp, $smtpConnection);
 354
 355       // Send the message
 356       $headerlength = write822Header ($smtpConnection, $t, $c, $b, $subject, $more_headers);
 357       $bodylength = writeBody($smtpConnection, $body);
 358
 359       fputs($smtpConnection, ".\r\n"); // end the DATA part
 360       $tmp = fgets($smtpConnection, 1024);
 361       $num = errorCheck($tmp, $smtpConnection);
 362       if ($num != 250) {
 363          $tmp = nl2br(htmlspecialchars($tmp));
 364          echo "ERROR<BR>Message not sent!<BR>Reason given: $tmp<BR></BODY></HTML>";
 365       }
 366
 367       fputs($smtpConnection, "QUIT\r\n"); // log off
 368
 369       fclose($smtpConnection);
 370
 371       return ($headerlength + $bodylength);
 372    }
 373
 374
 375    function errorCheck($line, $smtpConnection) {
 376       global $page_header_php;
 377       global $color;
 378       if (!isset($page_header_php)) {
 379          include "../functions/page_header.php";
 380       }
 381
 382       // Read new lines on a multiline response
 383       $lines = $line;
 384       while(ereg("^[0-9]+-", $line)) {
 385          $line = fgets($smtpConnection, 1024);
 386          $lines .= $line;
 387       }
 388
 389       // Status:  0 = fatal
 390       //          5 = ok
 391
 392       $err_num = substr($line, 0, strpos($line, " "));
 393       switch ($err_num) {
 394          case 500:   $message = "Syntax error; command not recognized";
 395                      $status = 0;
 396                      break;
 397          case 501:   $message = "Syntax error in parameters or arguments";
 398                      $status = 0;
 399                      break;
 400          case 502:   $message = "Command not implemented";
 401                      $status = 0;
 402                      break;
 403          case 503:   $message = "Bad sequence of commands";
 404                      $status = 0;
 405                      break;
 406          case 504:   $message = "Command parameter not implemented";
 407                      $status = 0;
 408                      break;
 409
 410
 411          case 211:   $message = "System status, or system help reply";
 412                      $status = 5;
 413                      break;
 414          case 214:   $message = "Help message";
 415                      $status = 5;
 416                      break;
 417
 418
 419          case 220:   $message = "Service ready";
 420                      $status = 5;
 421                      break;
 422          case 221:   $message = "Service closing transmission channel";
 423                      $status = 5;
 424                      break;
 425          case 421:   $message = "Service not available, closing chanel";
 426                      $status = 0;
 427                      break;
 428
 429
 430          case 250:   $message = "Requested mail action okay, completed";
 431                      $status = 5;
 432                      break;
 433          case 251:   $message = "User not local; will forward";
 434                      $status = 5;
 435                      break;
 436          case 450:   $message = "Requested mail action not taken:  mailbox unavailable";
 437                      $status = 0;
 438                      break;
 439          case 550:   $message = "Requested action not taken:  mailbox unavailable";
 440                      $status = 0;
 441                      break;
 442          case 451:   $message = "Requested action aborted:  error in processing";
 443                      $status = 0;
 444                      break;
 445          case 551:   $message = "User not local; please try forwarding";
 446                      $status = 0;
 447                      break;
 448          case 452:   $message = "Requested action not taken:  insufficient system storage";
 449                      $status = 0;
 450                      break;
 451          case 552:   $message = "Requested mail action aborted:  exceeding storage allocation";
 452                      $status = 0;
 453                      break;
 454          case 553:   $message = "Requested action not taken: mailbox name not allowed";
 455                      $status = 0;
 456                      break;
 457          case 354:   $message = "Start mail input; end with .";
 458                      $status = 5;
 459                      break;
 460          case 554:   $message = "Transaction failed";
 461                      $status = 0;
 462                      break;
 463          default:    $message = "Unknown response: ". nl2br(htmlspecialchars($lines));
 464                      $status = 0;
 465                      $error_num = "001";
 466                      break;
 467       }
 468
 469       if ($status == 0) {
 470          displayPageHeader($color, "None");
 471          echo "<TT>";
 472          echo "<br><b><font color=\"$color[1]\">ERROR</font></b><br><br>";
 473          echo "&nbsp;&nbsp;&nbsp;<B>Error Number: </B>$err_num<BR>";
 474          echo "&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<B>Reason: </B>$message<BR>";
 475          $lines = nl2br(htmlspecialchars($lines));
 476          echo "<B>Server Response: </B>$lines<BR>";
 477          echo "<BR>MAIL NOT SENT";
 478          echo "</TT></BODY></HTML>";
 479          exit;
 480       }
 481       return $err_num;
 482    }
 483
 484    function sendMessage($t, $c, $b, $subject, $body, $reply_id) {
 485       global $useSendmail, $msg_id, $is_reply, $mailbox;
 486       global $data_dir, $username, $domain, $key, $version, $sent_folder, $imapServerAddress, $imapPort;
 487       $more_headers = Array();
 488
 489       $imap_stream = sqimap_login($username, $key, $imapServerAddress, $imapPort, 1);
 490
 491       if ($reply_id) {
 492          sqimap_mailbox_select ($imap_stream, $mailbox);
 493          sqimap_messages_flag ($imap_stream, $reply_id, $reply_id, "Answered");
 494
 495          // Insert In-Reply-To and References headers if the
 496          // message-id of the message we reply to is set (longer than "<>")
 497          // The References header should really be the old Referenced header
 498          // with the message ID appended, but it can be only the message ID too.
 499          $hdr = sqimap_get_small_header ($imap_stream, $reply_id, false);
 500          if(strlen($hdr->message_id) > 2) {
 501             $more_headers["In-Reply-To"] = $hdr->message_id;
 502             $more_headers["References"]  = $hdr->message_id;
 503          }
 504       }
 505
 506       // In order to remove the problem of users not able to create
 507           // messages with "." on a blank line, RFC821 has made provision
 508           // in section 4.5.2 (Transparency).
 509           $body = ereg_replace("\n\.", "\n\.\.", $body);
 510           $body = ereg_replace("^\.", "\.\.", $body);
 511
 512       // this is to catch all plain \n instances and
 513       // replace them with \r\n.
 514       $body = ereg_replace("\r\n", "\n", $body);
 515       $body = ereg_replace("\n", "\r\n", $body);
 516
 517       if ($useSendmail) {
 518          $length = sendSendmail($t, $c, $b, $subject, $body, $more_headers);
 519       } else {
 520          $length = sendSMTP($t, $c, $b, $subject, $body, $more_headers);
 521       }
 522
 523       if (sqimap_mailbox_exists ($imap_stream, $sent_folder)) {
 524          sqimap_append ($imap_stream, $sent_folder, $length);
 525          write822Header ($imap_stream, $t, $c, $b, $subject, $more_headers);
 526          writeBody ($imap_stream, $body);
 527          sqimap_append_done ($imap_stream);
 528       }
 529       sqimap_logout($imap_stream);
 530       // Delete the files uploaded for attaching (if any).
 531       deleteAttachments();
 532    }
 533
 534 ?>