functions/smtp.php

   1 <?php
   2    /** smtp.php
   3     **
   4     ** This contains all the functions needed to send messages through
   5     ** an smtp server or sendmail.
   6     **
   7     ** $Id$
   8     **/
   9
  10    $smtp_php = true;
  11
  12    // This should most probably go to some initialization...
  13    if (ereg("^([^@%/]+)[@%/](.+)$", $username, $usernamedata)) {
  14       $popuser = $usernamedata[1];
  15       $domain  = $usernamedata[2];
  16           unset($usernamedata);
  17    } else {
  18       $popuser = $username;
  19    }
  20    // We need domain for smtp
  21    if (!$domain)
  22       $domain = getenv('HOSTNAME');
  23
  24    // Returns true only if this message is multipart
  25    function isMultipart () {
  26       global $attachments;
  27
  28       if (count($attachments)>0)
  29          return true;
  30       else
  31          return false;
  32    }
  33
  34    // Attach the files that are due to be attached
  35    function attachFiles ($fp) {
  36       global $attachments, $attachment_dir;
  37
  38       $length = 0;
  39
  40       if (isMultipart()) {
  41          reset($attachments);
  42          while (list($localname, $remotename) = each($attachments)) {
  43             // This is to make sure noone is giving a filename in another
  44             // directory
  45             $localname = ereg_replace ("\\/", '', $localname);
  46
  47             $fileinfo = fopen ($attachment_dir.$localname.'.info', 'r');
  48             $filetype = fgets ($fileinfo, 8192);
  49             fclose ($fileinfo);
  50             $filetype = trim ($filetype);
  51             if ($filetype=='')
  52                $filetype = 'application/octet-stream';
  53
  54             $header = '--'.mimeBoundary()."\r\n";
  55             $header .= "Content-Type: $filetype;name=\"$remotename\"\r\n";
  56             $header .= "Content-Disposition: attachment; filename=\"$remotename\"\r\n";
  57             $header .= "Content-Transfer-Encoding: base64\r\n\r\n";
  58             fputs ($fp, $header);
  59             $length += strlen($header);
  60
  61             $file = fopen ($attachment_dir.$localname, 'r');
  62             while ($tmp = fread($file, 570)) {
  63                $encoded = chunk_split(base64_encode($tmp));
  64                $length += strlen($encoded);
  65                fputs ($fp, $encoded);
  66             }
  67             fclose ($file);
  68          }
  69       }
  70
  71       return $length;
  72    }
  73
  74    // Delete files that are uploaded for attaching
  75    function deleteAttachments() {
  76       global $attachments, $attachment_dir;
  77
  78       if (isMultipart()) {
  79          reset($attachments);
  80          while (list($localname, $remotename) = each($attachments)) {
  81             if (!ereg ("\\/", $localname)) {
  82                unlink ($attachment_dir.$localname);
  83                unlink ($attachment_dir.$localname.'.info');
  84             }
  85          }
  86       }
  87    }
  88
  89    // Return a nice MIME-boundary
  90    function mimeBoundary () {
  91       static $mimeBoundaryString;
  92
  93       if ($mimeBoundaryString == "") {
  94          $mimeBoundaryString = GenerateRandomString(70, '\'()+,-./:=?_', 7);
  95       }
  96
  97       return $mimeBoundaryString;
  98    }
  99
 100    /* Time offset for correct timezone */
 101    function timezone () {
 102       global $invert_time;
 103
 104       $diff_second = date('Z');
 105       if ($invert_time)
 106           $diff_second = - $diff_second;
 107       if ($diff_second > 0)
 108          $sign = '+';
 109       else
 110          $sign = '-';
 111
 112       $diff_second = abs($diff_second);
 113
 114       $diff_hour = floor ($diff_second / 3600);
 115       $diff_minute = floor (($diff_second-3600*$diff_hour) / 60);
 116
 117       $zonename = '('.strftime('%Z').')';
 118       $result = sprintf ("%s%02d%02d %s", $sign, $diff_hour, $diff_minute, $zonename);
 119       return ($result);
 120    }
 121
 122    /* Print all the needed RFC822 headers */
 123    function write822Header ($fp, $t, $c, $b, $subject, $more_headers) {
 124       global $REMOTE_ADDR, $SERVER_NAME, $REMOTE_PORT;
 125       global $data_dir, $username, $popuser, $domain, $version, $useSendmail;
 126       global $default_charset, $HTTP_VIA, $HTTP_X_FORWARDED_FOR;
 127       global $REMOTE_HOST;
 128
 129       // Storing the header to make sure the header is the same
 130       // everytime the header is printed.
 131       static $header, $headerlength;
 132
 133       if ($header == '') {
 134          $to = parseAddrs($t);
 135          $cc = parseAddrs($c);
 136          $bcc = parseAddrs($b);
 137          $reply_to = getPref($data_dir, $username, 'reply_to');
 138          $from = getPref($data_dir, $username, 'full_name');
 139          $from_addr = getPref($data_dir, $username, 'email_address');
 140
 141          if ($from_addr == '')
 142             $from_addr = $popuser.'@'.$domain;
 143
 144          $to_list = getLineOfAddrs($to);
 145          $cc_list = getLineOfAddrs($cc);
 146          $bcc_list = getLineOfAddrs($bcc);
 147
 148          /* Encoding 8-bit characters and making from line */
 149          $subject = sqStripSlashes(encodeHeader($subject));
 150          if ($from == '')
 151             $from = "<$from_addr>";
 152          else
 153             $from = '"' . encodeHeader($from) . "\" <$from_addr>";
 154
 155          /* This creates an RFC 822 date */
 156          $date = date("D, j M Y H:i:s ", mktime()) . timezone();
 157
 158          /* Create a message-id */
 159          $message_id = '<' . $REMOTE_PORT . '.' . $REMOTE_ADDR . '.';
 160          $message_id .= time() . '.squirrel@' . $SERVER_NAME .'>';
 161
 162          /* Make an RFC822 Received: line */
 163          if (isset($REMOTE_HOST))
 164             $received_from = "$REMOTE_HOST ([$REMOTE_ADDR])";
 165          else
 166             $received_from = $REMOTE_ADDR;
 167
 168          if (isset($HTTP_VIA) || isset ($HTTP_X_FORWARDED_FOR)) {
 169             if ($HTTP_X_FORWARDED_FOR == '')
 170                $HTTP_X_FORWARDED_FOR = 'unknown';
 171             $received_from .= " (proxying for $HTTP_X_FORWARDED_FOR)";
 172          }
 173
 174          $header  = "Received: from $received_from\r\n";
 175          $header .= "        (SquirrelMail authenticated user $username)\r\n";
 176          $header .= "        by $SERVER_NAME with HTTP;\r\n";
 177          $header .= "        $date\r\n";
 178
 179          /* Insert the rest of the header fields */
 180          $header .= "Message-ID: $message_id\r\n";
 181          $header .= "Date: $date\r\n";
 182          $header .= "Subject: $subject\r\n";
 183          $header .= "From: $from\r\n";
 184          $header .= "To: $to_list \r\n";    // Who it's TO
 185
 186          /* Insert headers from the $more_headers array */
 187          if(is_array($more_headers)) {
 188             reset($more_headers);
 189             while(list($h_name, $h_val) = each($more_headers)) {
 190                $header .= sprintf("%s: %s\r\n", $h_name, $h_val);
 191             }
 192          }
 193
 194          if ($cc_list) {
 195             $header .= "Cc: $cc_list\r\n"; // Who the CCs are
 196          }
 197
 198          if ($reply_to != '')
 199             $header .= "Reply-To: $reply_to\r\n";
 200
 201          if ($useSendmail) {
 202             if ($bcc_list) {
 203                // BCCs is removed from header by sendmail
 204                $header .= "Bcc: $bcc_list\r\n";
 205             }
 206          }
 207
 208          $header .= "X-Mailer: SquirrelMail (version $version)\r\n"; // Identify SquirrelMail
 209
 210          // Do the MIME-stuff
 211          $header .= "MIME-Version: 1.0\r\n";
 212
 213          if (isMultipart()) {
 214             $header .= 'Content-Type: multipart/mixed; boundary="';
 215             $header .= mimeBoundary();
 216             $header .= "\"\r\n";
 217          } else {
 218             if ($default_charset != '')
 219                $header .= "Content-Type: text/plain; charset=$default_charset\r\n";
 220             else
 221                $header .= "Content-Type: text/plain;\r\n";
 222             $header .= "Content-Transfer-Encoding: 8bit\r\n";
 223          }
 224          $header .= "\r\n"; // One blank line to separate header and body
 225
 226          $headerlength = strlen($header);
 227       }
 228
 229       // Write the header
 230       fputs ($fp, $header);
 231
 232       return $headerlength;
 233    }
 234
 235    // Send the body
 236    function writeBody ($fp, $passedBody) {
 237       global $default_charset;
 238
 239       $attachmentlength = 0;
 240
 241       if (isMultipart()) {
 242          $body = '--'.mimeBoundary()."\r\n";
 243
 244          if ($default_charset != "")
 245             $body .= "Content-Type: text/plain; charset=$default_charset\r\n";
 246          else
 247             $body .= "Content-Type: text/plain\r\n";
 248
 249          $body .= "Content-Transfer-Encoding: 8bit\r\n\r\n";
 250          $body .= sqStripSlashes($passedBody) . "\r\n\r\n";
 251          fputs ($fp, $body);
 252
 253          $attachmentlength = attachFiles($fp);
 254
 255          $postbody .= "\r\n--".mimeBoundary()."--\r\n\r\n";
 256          fputs ($fp, $postbody);
 257       } else {
 258          $body = sqStripSlashes($passedBody) . "\r\n";
 259          fputs ($fp, $body);
 260          $postbody = "\r\n";
 261          fputs ($fp, $postbody);
 262       }
 263
 264       return (strlen($body) + strlen($postbody) + $attachmentlength);
 265    }
 266
 267    // Send mail using the sendmail command
 268    function sendSendmail($t, $c, $b, $subject, $body, $more_headers) {
 269       global $sendmail_path, $popuser, $username, $domain;
 270
 271       // Build envelope sender address. Make sure it doesn't contain
 272       // spaces or other "weird" chars that would allow a user to
 273       // exploit the shell/pipe it is used in.
 274       $envelopefrom = "$popuser@$domain";
 275       $envelopefrom = ereg_replace("[[:blank:]]",'', $envelopefrom);
 276       $envelopefrom = ereg_replace("[[:space:]]",'', $envelopefrom);
 277       $envelopefrom = ereg_replace("[[:cntrl:]]",'', $envelopefrom);
 278
 279       // open pipe to sendmail
 280       $fp = popen (escapeshellcmd("$sendmail_path -t -f$envelopefrom"), 'w');
 281
 282       $headerlength = write822Header ($fp, $t, $c, $b, $subject, $more_headers);
 283       $bodylength = writeBody($fp, $body);
 284
 285       pclose($fp);
 286
 287       return ($headerlength + $bodylength);
 288    }
 289
 290    function smtpReadData($smtpConnection) {
 291       $read = fgets($smtpConnection, 1024);
 292       $counter = 0;
 293       while ($read) {
 294          echo $read . '<BR>';
 295          $data[$counter] = $read;
 296          $read = fgets($smtpConnection, 1024);
 297          $counter++;
 298       }
 299    }
 300
 301    function sendSMTP($t, $c, $b, $subject, $body, $more_headers) {
 302       global $username, $popuser, $domain, $version, $smtpServerAddress, $smtpPort,
 303          $data_dir, $color;
 304
 305       $to = parseAddrs($t);
 306       $cc = parseAddrs($c);
 307       $bcc = parseAddrs($b);
 308       $from_addr = getPref($data_dir, $username, 'email_address');
 309
 310       if (!$from_addr)
 311          $from_addr = "$popuser@$domain";
 312
 313       $smtpConnection = fsockopen($smtpServerAddress, $smtpPort, $errorNumber, $errorString);
 314       if (!$smtpConnection) {
 315          echo 'Error connecting to SMTP Server.<br>';
 316          echo "$errorNumber : $errorString<br>";
 317          exit;
 318       }
 319       $tmp = fgets($smtpConnection, 1024);
 320       errorCheck($tmp, $smtpConnection);
 321
 322       $to_list = getLineOfAddrs($to);
 323       $cc_list = getLineOfAddrs($cc);
 324
 325       /** Lets introduce ourselves */
 326       fputs($smtpConnection, "HELO $domain\r\n");
 327       $tmp = fgets($smtpConnection, 1024);
 328       errorCheck($tmp, $smtpConnection);
 329
 330       /** Ok, who is sending the message? */
 331       fputs($smtpConnection, "MAIL FROM:<$from_addr>\r\n");
 332       $tmp = fgets($smtpConnection, 1024);
 333       errorCheck($tmp, $smtpConnection);
 334
 335       /** send who the recipients are */
 336       for ($i = 0; $i < count($to); $i++) {
 337          fputs($smtpConnection, "RCPT TO:<$to[$i]>\r\n");
 338          $tmp = fgets($smtpConnection, 1024);
 339          errorCheck($tmp, $smtpConnection);
 340       }
 341       for ($i = 0; $i < count($cc); $i++) {
 342          fputs($smtpConnection, "RCPT TO:<$cc[$i]>\r\n");
 343          $tmp = fgets($smtpConnection, 1024);
 344          errorCheck($tmp, $smtpConnection);
 345       }
 346       for ($i = 0; $i < count($bcc); $i++) {
 347          fputs($smtpConnection, "RCPT TO:<$bcc[$i]>\r\n");
 348          $tmp = fgets($smtpConnection, 1024);
 349          errorCheck($tmp, $smtpConnection);
 350       }
 351
 352       /** Lets start sending the actual message */
 353       fputs($smtpConnection, "DATA\r\n");
 354       $tmp = fgets($smtpConnection, 1024);
 355       errorCheck($tmp, $smtpConnection);
 356
 357       // Send the message
 358       $headerlength = write822Header ($smtpConnection, $t, $c, $b, $subject, $more_headers);
 359       $bodylength = writeBody($smtpConnection, $body);
 360
 361       fputs($smtpConnection, ".\r\n"); // end the DATA part
 362       $tmp = fgets($smtpConnection, 1024);
 363       $num = errorCheck($tmp, $smtpConnection);
 364       if ($num != 250) {
 365          $tmp = nl2br(htmlspecialchars($tmp));
 366          echo "ERROR<BR>Message not sent!<BR>Reason given: $tmp<BR></BODY></HTML>";
 367       }
 368
 369       fputs($smtpConnection, "QUIT\r\n"); // log off
 370
 371       fclose($smtpConnection);
 372
 373       return ($headerlength + $bodylength);
 374    }
 375
 376
 377    function errorCheck($line, $smtpConnection) {
 378       global $page_header_php;
 379       global $color;
 380       if (!isset($page_header_php)) {
 381          include '../functions/page_header.php';
 382       }
 383
 384       // Read new lines on a multiline response
 385       $lines = $line;
 386       while(ereg("^[0-9]+-", $line)) {
 387          $line = fgets($smtpConnection, 1024);
 388          $lines .= $line;
 389       }
 390
 391       // Status:  0 = fatal
 392       //          5 = ok
 393
 394       $err_num = substr($line, 0, strpos($line, " "));
 395       switch ($err_num) {
 396          case 500:   $message = 'Syntax error; command not recognized';
 397                      $status = 0;
 398                      break;
 399          case 501:   $message = 'Syntax error in parameters or arguments';
 400                      $status = 0;
 401                      break;
 402          case 502:   $message = 'Command not implemented';
 403                      $status = 0;
 404                      break;
 405          case 503:   $message = 'Bad sequence of commands';
 406                      $status = 0;
 407                      break;
 408          case 504:   $message = 'Command parameter not implemented';
 409                      $status = 0;
 410                      break;
 411
 412
 413          case 211:   $message = 'System status, or system help reply';
 414                      $status = 5;
 415                      break;
 416          case 214:   $message = 'Help message';
 417                      $status = 5;
 418                      break;
 419
 420
 421          case 220:   $message = 'Service ready';
 422                      $status = 5;
 423                      break;
 424          case 221:   $message = 'Service closing transmission channel';
 425                      $status = 5;
 426                      break;
 427          case 421:   $message = 'Service not available, closing chanel';
 428                      $status = 0;
 429                      break;
 430
 431
 432          case 250:   $message = 'Requested mail action okay, completed';
 433                      $status = 5;
 434                      break;
 435          case 251:   $message = 'User not local; will forward';
 436                      $status = 5;
 437                      break;
 438          case 450:   $message = 'Requested mail action not taken:  mailbox unavailable';
 439                      $status = 0;
 440                      break;
 441          case 550:   $message = 'Requested action not taken:  mailbox unavailable';
 442                      $status = 0;
 443                      break;
 444          case 451:   $message = 'Requested action aborted:  error in processing';
 445                      $status = 0;
 446                      break;
 447          case 551:   $message = 'User not local; please try forwarding';
 448                      $status = 0;
 449                      break;
 450          case 452:   $message = 'Requested action not taken:  insufficient system storage';
 451                      $status = 0;
 452                      break;
 453          case 552:   $message = 'Requested mail action aborted:  exceeding storage allocation';
 454                      $status = 0;
 455                      break;
 456          case 553:   $message = 'Requested action not taken: mailbox name not allowed';
 457                      $status = 0;
 458                      break;
 459          case 354:   $message = 'Start mail input; end with .';
 460                      $status = 5;
 461                      break;
 462          case 554:   $message = 'Transaction failed';
 463                      $status = 0;
 464                      break;
 465          default:    $message = 'Unknown response: '. nl2br(htmlspecialchars($lines));
 466                      $status = 0;
 467                      $error_num = '001';
 468                      break;
 469       }
 470
 471       if ($status == 0) {
 472          displayPageHeader($color, 'None');
 473          echo '<TT>';
 474          echo "<br><b><font color=\"$color[1]\">ERROR</font></b><br><br>";
 475          echo "&nbsp;&nbsp;&nbsp;<B>Error Number: </B>$err_num<BR>";
 476          echo "&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<B>Reason: </B>$message<BR>";
 477          $lines = nl2br(htmlspecialchars($lines));
 478          echo "<B>Server Response: </B>$lines<BR>";
 479          echo '<BR>MAIL NOT SENT';
 480          echo '</TT></BODY></HTML>';
 481          exit;
 482       }
 483       return $err_num;
 484    }
 485
 486    function sendMessage($t, $c, $b, $subject, $body, $reply_id) {
 487       global $useSendmail, $msg_id, $is_reply, $mailbox;
 488       global $data_dir, $username, $domain, $key, $version, $sent_folder, $imapServerAddress, $imapPort;
 489       $more_headers = Array();
 490
 491       $imap_stream = sqimap_login($username, $key, $imapServerAddress, $imapPort, 1);
 492
 493       if ($reply_id) {
 494          sqimap_mailbox_select ($imap_stream, $mailbox);
 495          sqimap_messages_flag ($imap_stream, $reply_id, $reply_id, 'Answered');
 496
 497          // Insert In-Reply-To and References headers if the
 498          // message-id of the message we reply to is set (longer than "<>")
 499          // The References header should really be the old Referenced header
 500          // with the message ID appended, but it can be only the message ID too.
 501          $hdr = sqimap_get_small_header ($imap_stream, $reply_id, false);
 502          if(strlen($hdr->message_id) > 2) {
 503             $more_headers['In-Reply-To'] = $hdr->message_id;
 504             $more_headers['References']  = $hdr->message_id;
 505          }
 506       }
 507
 508       // In order to remove the problem of users not able to create
 509           // messages with "." on a blank line, RFC821 has made provision
 510           // in section 4.5.2 (Transparency).
 511           $body = ereg_replace("\n\.", "\n\.\.", $body);
 512           $body = ereg_replace("^\.", "\.\.", $body);
 513
 514       // this is to catch all plain \n instances and
 515       // replace them with \r\n.
 516       $body = ereg_replace("\r\n", "\n", $body);
 517       $body = ereg_replace("\n", "\r\n", $body);
 518
 519       if ($useSendmail) {
 520          $length = sendSendmail($t, $c, $b, $subject, $body, $more_headers);
 521       } else {
 522          $length = sendSMTP($t, $c, $b, $subject, $body, $more_headers);
 523       }
 524
 525       if (sqimap_mailbox_exists ($imap_stream, $sent_folder)) {
 526          sqimap_append ($imap_stream, $sent_folder, $length);
 527          write822Header ($imap_stream, $t, $c, $b, $subject, $more_headers);
 528          writeBody ($imap_stream, $body);
 529          sqimap_append_done ($imap_stream);
 530       }
 531       sqimap_logout($imap_stream);
 532       // Delete the files uploaded for attaching (if any).
 533       deleteAttachments();
 534    }
 535
 536 ?>