src/compose.php

   1 <?php
   2 /**
   3  * compose.php
   4  *
   5  * This code sends a mail.
   6  *
   7  * There are 4 modes of operation:
   8  *    - Start new mail
   9  *    - Add an attachment
  10  *    - Send mail
  11  *    - Save As Draft
  12  *
  13  * @copyright 1999-2010 The SquirrelMail Project Team
  14  * @license http://opensource.org/licenses/gpl-license.php GNU Public License
  15  * @version $Id$
  16  * @package squirrelmail
  17  */
  18
  19 /** This is the compose page */
  20 define('PAGE_NAME', 'compose');
  21
  22 /**
  23  * Include the SquirrelMail initialization file.
  24  */
  25 require('../include/init.php');
  26
  27 /* If email_address not set and admin wants us to ask user for it,
  28  * redirect to options page. */
  29 if ( $ask_user_info && getPref($data_dir, $username,'email_address') == "" ) {
  30     header("Location: " . get_location() . "/options.php?optpage=personal");
  31     exit;
  32 }
  33
  34 /* SquirrelMail required files. */
  35 require_once(SM_PATH . 'functions/imap_general.php');
  36 require_once(SM_PATH . 'functions/imap_messages.php');
  37 require_once(SM_PATH . 'functions/date.php');
  38 require_once(SM_PATH . 'functions/mime.php');
  39 require_once(SM_PATH . 'functions/compose.php');
  40 require_once(SM_PATH . 'class/deliver/Deliver.class.php');
  41 require_once(SM_PATH . 'functions/addressbook.php');
  42 require_once(SM_PATH . 'functions/forms.php');
  43 require_once(SM_PATH . 'functions/identity.php');
  44
  45 /* --------------------- Get globals ------------------------------------- */
  46
  47 /** SESSION VARS */
  48 sqgetGlobalVar('delimiter', $delimiter,     SQ_SESSION);
  49
  50 sqgetGlobalVar('delayed_errors',  $delayed_errors,  SQ_SESSION);
  51 sqgetGlobalVar('composesession',    $composesession,    SQ_SESSION);
  52 sqgetGlobalVar('compose_messages',  $compose_messages,  SQ_SESSION);
  53
  54 // compose_messages only useful in SESSION when a forward-as-attachment
  55 // has been preconstructed for us and passed in via that mechanism; once
  56 // we have it, we can clear it from the SESSION
  57 sqsession_unregister('compose_messages');
  58
  59 // Turn on delayed error handling in case we wind up redirecting below
  60 $oErrorHandler->setDelayedErrors(true);
  61
  62 /** SESSION/POST/GET VARS */
  63 sqgetGlobalVar('send_button_count', $send_button_count, SQ_POST, 1, SQ_TYPE_INT);
  64 for ($i = 1; $i <= $send_button_count; $i++)
  65    if (sqgetGlobalVar('send' . $i, $send, SQ_POST)) break;
  66 // Send can only be achieved by setting $_POST var. If Send = true then
  67 // retrieve other form fields from $_POST
  68 if (isset($send) && $send) {
  69     $SQ_GLOBAL = SQ_POST;
  70 } else {
  71     $SQ_GLOBAL = SQ_FORM;
  72 }
  73 sqgetGlobalVar('session',$session, $SQ_GLOBAL);
  74 sqgetGlobalVar('mailbox',$mailbox, $SQ_GLOBAL);
  75 if(!sqgetGlobalVar('identity',$identity, $SQ_GLOBAL)) {
  76     $identity=0;
  77 }
  78 sqgetGlobalVar('send_to',$send_to, $SQ_GLOBAL);
  79 sqgetGlobalVar('send_to_cc',$send_to_cc, $SQ_GLOBAL);
  80 sqgetGlobalVar('send_to_bcc',$send_to_bcc, $SQ_GLOBAL);
  81 sqgetGlobalVar('subject',$subject, $SQ_GLOBAL);
  82 sqgetGlobalVar('body',$body, $SQ_GLOBAL);
  83 sqgetGlobalVar('mailprio',$mailprio, $SQ_GLOBAL);
  84 sqgetGlobalVar('request_mdn',$request_mdn, $SQ_GLOBAL);
  85 sqgetGlobalVar('request_dr',$request_dr, $SQ_GLOBAL);
  86 sqgetGlobalVar('html_addr_search',$html_addr_search, $SQ_GLOBAL);
  87 sqgetGlobalVar('mail_sent',$mail_sent, $SQ_GLOBAL);
  88 sqgetGlobalVar('passed_id',$passed_id, $SQ_GLOBAL, NULL, SQ_TYPE_BIGINT);
  89 sqgetGlobalVar('passed_ent_id',$passed_ent_id, $SQ_GLOBAL);
  90 sqgetGlobalVar('fwduid',$fwduid, $SQ_GLOBAL, '');
  91
  92 sqgetGlobalVar('attach',$attach, SQ_POST);
  93 sqgetGlobalVar('draft',$draft, SQ_POST);
  94 sqgetGlobalVar('draft_id',$draft_id, $SQ_GLOBAL);
  95 sqgetGlobalVar('ent_num',$ent_num, $SQ_GLOBAL);
  96 sqgetGlobalVar('saved_draft',$saved_draft, SQ_FORM);
  97
  98 if ( sqgetGlobalVar('delete_draft',$delete_draft) ) {
  99     $delete_draft = (int)$delete_draft;
 100 }
 101
 102 if ( sqgetGlobalVar('startMessage',$startMessage) ) {
 103     $startMessage = (int)$startMessage;
 104 } else {
 105     $startMessage = 1;
 106 }
 107
 108
 109 /** POST VARS */
 110 sqgetGlobalVar('sigappend',             $sigappend,                 SQ_POST);
 111 sqgetGlobalVar('from_htmladdr_search',  $from_htmladdr_search,      SQ_POST);
 112 sqgetGlobalVar('addr_search_done',      $html_addr_search_done,     SQ_POST);
 113 sqgetGlobalVar('addr_search_cancel',    $html_addr_search_cancel,   SQ_POST);
 114 sqgetGlobalVar('send_to_search',        $send_to_search,            SQ_POST);
 115 sqgetGlobalVar('do_delete',             $do_delete,                 SQ_POST);
 116 sqgetGlobalVar('delete',                $delete,                    SQ_POST);
 117 sqgetGlobalVar('attachments',           $attachments,               SQ_POST);
 118 if ( sqgetGlobalVar('return', $temp, SQ_POST) ) {
 119     $html_addr_search_done = 'Use Addresses';
 120 }
 121
 122 /** GET VARS */
 123 if ( sqgetGlobalVar('account', $temp,  SQ_GET) ) {
 124     $iAccount = (int) $temp;
 125 } else {
 126     $iAccount = 0;
 127 }
 128
 129
 130 /** get smaction */
 131 if ( !sqgetGlobalVar('smaction',$action) )
 132 {
 133     if ( sqgetGlobalVar('smaction_reply',$tmp) )      $action = 'reply';
 134     if ( sqgetGlobalVar('smaction_reply_all',$tmp) )  $action = 'reply_all';
 135     if ( sqgetGlobalVar('smaction_forward',$tmp) )    $action = 'forward';
 136     if ( sqgetGlobalVar('smaction_attache',$tmp) )    $action = 'forward_as_attachment';
 137     if ( sqgetGlobalVar('smaction_draft',$tmp) )      $action = 'draft';
 138     if ( sqgetGlobalVar('smaction_edit_new',$tmp) )   $action = 'edit_as_new';
 139 }
 140
 141 sqgetGlobalVar('smtoken', $submitted_token, $SQ_GLOBAL, '');
 142
 143 /**
 144  * Here we decode the data passed in from mailto.php.
 145  */
 146 if ( sqgetGlobalVar('mailtodata', $mailtodata, SQ_GET) ) {
 147     $trtable = array('to'       => 'send_to',
 148                  'cc'           => 'send_to_cc',
 149                  'bcc'          => 'send_to_bcc',
 150                  'body'         => 'body',
 151                  'subject'      => 'subject');
 152     $mtdata = unserialize($mailtodata);
 153
 154     foreach ($trtable as $f => $t) {
 155         if ( !empty($mtdata[$f]) ) {
 156             $$t = $mtdata[$f];
 157         }
 158     }
 159     unset($mailtodata,$mtdata, $trtable);
 160 }
 161
 162 /* Location (For HTTP 1.1 header("Location: ...") redirects) */
 163 $location = get_location();
 164 /* Identities (fetch only once) */
 165 $idents = get_identities();
 166
 167 /* --------------------- Specific Functions ------------------------------ */
 168
 169 function replyAllString($header) {
 170     global $include_self_reply_all, $idents;
 171     $excl_ar = array();
 172     /**
 173      * 1) Remove the addresses we'll be sending the message 'to'
 174      */
 175     if (isset($header->reply_to)) {
 176         $excl_ar = $header->getAddr_a('reply_to');
 177     }
 178     /**
 179      * 2) Remove our identities from the CC list (they still can be in the
 180      * TO list) only if $include_self_reply_all is turned off
 181      */
 182     if (!$include_self_reply_all) {
 183         foreach($idents as $id) {
 184             $excl_ar[strtolower(trim($id['email_address']))] = '';
 185         }
 186     }
 187
 188     /**
 189      * 3) get the addresses.
 190      */
 191     $url_replytoall_ar = $header->getAddr_a(array('to','cc'), $excl_ar);
 192
 193     /**
 194      * 4) generate the string.
 195      */
 196     $url_replytoallcc = '';
 197     foreach( $url_replytoall_ar as $email => $personal) {
 198         if ($personal) {
 199             // if personal name contains address separator then surround
 200             // the personal name with double quotes.
 201             if (strpos($personal,',') !== false) {
 202                 $personal = '"'.$personal.'"';
 203             }
 204             $url_replytoallcc .= ", $personal <$email>";
 205         } else {
 206             $url_replytoallcc .= ', '. $email;
 207         }
 208     }
 209     $url_replytoallcc = substr($url_replytoallcc,2);
 210
 211     return $url_replytoallcc;
 212 }
 213
 214 /**
 215  * creates top line in reply citations
 216  *
 217  * Line style depends on user preferences.
 218  * $orig_date argument is available only from 1.4.3 and 1.5.1 version.
 219  * @param object $orig_from From: header object.
 220  * @param integer $orig_date email's timestamp
 221  * @return string reply citation
 222  */
 223 function getReplyCitation($orig_from, $orig_date) {
 224     global $reply_citation_style, $reply_citation_start, $reply_citation_end;
 225
 226     if (!is_object($orig_from)) {
 227         $sOrig_from = '';
 228     } else {
 229         $sOrig_from = decodeHeader($orig_from->getAddress(false),false,false,true);
 230     }
 231
 232     /* First, return an empty string when no citation style selected. */
 233     if (($reply_citation_style == '') || ($reply_citation_style == 'none')) {
 234         return '';
 235     }
 236
 237     /* Make sure our final value isn't an empty string. */
 238     if ($sOrig_from == '') {
 239         return '';
 240     }
 241
 242     /* Otherwise, try to select the desired citation style. */
 243     switch ($reply_citation_style) {
 244     case 'author_said':
 245         // i18n: %s is for author's name
 246         $full_reply_citation = sprintf(_("%s wrote:"),$sOrig_from);
 247         break;
 248     case 'quote_who':
 249         $start = '<quote who="';
 250         $end   = '">';
 251         $full_reply_citation = $start . $sOrig_from . $end;
 252         break;
 253     case 'date_time_author':
 254         // i18n:
 255         // The first %s is for date string, the second %s is for author's name.
 256         // The date uses formating from "D, F j, Y g:i a" and "D, F j, Y H:i"
 257         // translations.
 258         // Example string:
 259         // "On Sat, December 24, 2004 23:59, Santa wrote:"
 260         // If you have to put author's name in front of date string, check comments about
 261         // argument swapping at http://php.net/sprintf
 262         $full_reply_citation = sprintf(_("On %s, %s wrote:"), getLongDateString($orig_date), $sOrig_from);
 263         break;
 264     case 'user-defined':
 265         $start = $reply_citation_start .
 266             ($reply_citation_start == '' ? '' : ' ');
 267         $end   = $reply_citation_end;
 268         $full_reply_citation = $start . $sOrig_from . $end;
 269         break;
 270     default:
 271         return '';
 272     }
 273
 274     /* Add line feed and return the citation string. */
 275     return ($full_reply_citation . "\n");
 276 }
 277
 278 /**
 279  * Creates header fields in forwarded email body
 280  *
 281  * $default_charset global must be set correctly before you call this function.
 282  * @param object $orig_header
 283  * @return $string
 284  */
 285 function getforwardHeader($orig_header) {
 286     global $editor_size, $default_charset;
 287
 288     // using own strlen function in order to detect correct string length
 289     $display = array( _("Subject") => sq_strlen(_("Subject"),$default_charset),
 290             _("From")    => sq_strlen(_("From"),$default_charset),
 291             _("Date")    => sq_strlen(_("Date"),$default_charset),
 292             _("To")      => sq_strlen(_("To"),$default_charset),
 293             _("Cc")      => sq_strlen(_("Cc"),$default_charset) );
 294     $maxsize = max($display);
 295     $indent = str_pad('',$maxsize+2);
 296     foreach($display as $key => $val) {
 297         $display[$key] = $key .': '. str_pad('', $maxsize - $val);
 298     }
 299     $from = decodeHeader($orig_header->getAddr_s('from',"\n$indent"),false,false,true);
 300     $from = str_replace('&nbsp;',' ',$from);
 301     $to = decodeHeader($orig_header->getAddr_s('to',"\n$indent"),false,false,true);
 302     $to = str_replace('&nbsp;',' ',$to);
 303     $subject = decodeHeader($orig_header->subject,false,false,true);
 304     $subject = str_replace('&nbsp;',' ',$subject);
 305
 306     // using own str_pad function in order to create correct string pad
 307     $bodyTop =  sq_str_pad(' '._("Original Message").' ',$editor_size -2,'-',STR_PAD_BOTH,$default_charset) .
 308         "\n". $display[_("Subject")] . $subject . "\n" .
 309         $display[_("From")] . $from . "\n" .
 310         $display[_("Date")] . getLongDateString( $orig_header->date, $orig_header->date_unparsed ). "\n" .
 311         $display[_("To")] . $to . "\n";
 312     if ($orig_header->cc != array() && $orig_header->cc !='') {
 313         $cc = decodeHeader($orig_header->getAddr_s('cc',"\n$indent"),false,false,true);
 314         $cc = str_replace('&nbsp;',' ',$cc);
 315         $bodyTop .= $display[_("Cc")] .$cc . "\n";
 316     }
 317     $bodyTop .= str_pad('', $editor_size -2 , '-') .
 318         "\n\n";
 319     return $bodyTop;
 320 }
 321 /* ----------------------------------------------------------------------- */
 322
 323 /*
 324  * If the session is expired during a post this restores the compose session
 325  * vars.
 326  */
 327 $session_expired = false;
 328 if (sqsession_is_registered('session_expired_post')) {
 329     sqgetGlobalVar('session_expired_post', $session_expired_post, SQ_SESSION);
 330     /*
 331      * extra check for username so we don't display previous post data from
 332      * another user during this session.
 333      */
 334     if (!empty($session_expired_post['username'])
 335      && $session_expired_post['username'] == $username) {
 336         // these are the vars that we can set from the expired composed session
 337         $compo_var_list = array ('send_to', 'send_to_cc', 'body',
 338             'startMessage', 'passed_body', 'use_signature', 'signature',
 339             'subject', 'newmail', 'send_to_bcc', 'passed_id', 'mailbox',
 340             'from_htmladdr_search', 'identity', 'draft_id', 'delete_draft',
 341             'mailprio', 'edit_as_new', 'attachments', 'composesession',
 342             'request_mdn', 'request_dr', 'fwduid');
 343
 344         foreach ($compo_var_list as $var) {
 345             if ( isset($session_expired_post[$var]) && !isset($$var) ) {
 346                 $$var = $session_expired_post[$var];
 347             }
 348         }
 349
 350         if (!empty($attachments))
 351             $attachments = unserialize(urldecode($attachments));
 352
 353         sqsession_register($composesession,'composesession');
 354
 355         if (isset($send)) {
 356             unset($send);
 357         }
 358         $session_expired = true;
 359     }
 360     unset($session_expired_post);
 361     sqsession_unregister('session_expired_post');
 362     session_write_close();
 363     if (!isset($mailbox)) {
 364         $mailbox = '';
 365     }
 366     if ($compose_new_win == '1') {
 367         compose_Header($color, $mailbox);
 368     } else {
 369         $sHeaderJs = (isset($sHeaderJs)) ? $sHeaderJs : '';
 370         if (strpos($action, 'reply') !== false && $reply_focus) {
 371             $sOnload = 'checkForm(\''.$replyfocus.'\');';
 372         } else {
 373             $sOnload = 'checkForm();';
 374         }
 375         displayPageHeader($color, $mailbox,$sHeaderJs,$sOnload);
 376     }
 377     showInputForm($session, false);
 378     exit();
 379 }
 380
 381 if (!isset($composesession)) {
 382     $composesession = 0;
 383     sqsession_register(0,'composesession');
 384 } else {
 385     $composesession = (int)$composesession;
 386 }
 387
 388 if (!isset($session) || (isset($newmessage) && $newmessage)) {
 389     sqsession_unregister('composesession');
 390     $session = "$composesession" +1;
 391     $composesession = $session;
 392     sqsession_register($composesession,'composesession');
 393 }
 394 if (!empty($compose_messages[$session])) {
 395     $composeMessage = $compose_messages[$session];
 396 } else {
 397     $composeMessage = new Message();
 398     $rfc822_header = new Rfc822Header();
 399     $composeMessage->rfc822_header = $rfc822_header;
 400     $composeMessage->reply_rfc822_header = '';
 401 }
 402
 403 // re-add attachments that were already in this message
 404 // FIXME: note that technically this is very bad form -
 405 // should never directly manipulate an object like this
 406 if (!empty($attachments)) {
 407     $attachments = unserialize(urldecode($attachments));
 408     if (!empty($attachments) && is_array($attachments))
 409         $composeMessage->entities = $attachments;
 410 }
 411
 412 if (empty($mailbox)) {
 413     $mailbox = 'INBOX';
 414 }
 415
 416 if ($draft) {
 417
 418     // validate security token
 419     //
 420     sm_validate_security_token($submitted_token, 3600, TRUE);
 421
 422     /*
 423      * Set $default_charset to correspond with the user's selection
 424      * of language interface.
 425      */
 426     set_my_charset();
 427     if (! deliverMessage($composeMessage, true)) {
 428         showInputForm($session);
 429         exit();
 430     } else {
 431         $draft_message = _("Draft Email Saved");
 432         /* If this is a resumed draft, then delete the original */
 433         if(isset($delete_draft)) {
 434             $imap_stream = sqimap_login($username, false, $imapServerAddress, $imapPort, false);
 435             sqimap_mailbox_select($imap_stream, $draft_folder);
 436             // force bypass_trash=true because message should be saved when deliverMessage() returns true.
 437             // in current implementation of sqimap_msgs_list_flag() single message id can
 438             // be submitted as string. docs state that it should be array.
 439             sqimap_msgs_list_delete($imap_stream, $draft_folder, $delete_draft, true);
 440             if ($auto_expunge) {
 441                 sqimap_mailbox_expunge($imap_stream, $draft_folder, true);
 442             }
 443             sqimap_logout($imap_stream);
 444         }
 445
 446         $oErrorHandler->saveDelayedErrors();
 447         session_write_close();
 448
 449         if ($compose_new_win == '1') {
 450             if ( !isset($pageheader_sent) || !$pageheader_sent ) {
 451                 header("Location: $location/compose.php?saved_draft=yes&session=$composesession");
 452             } else {
 453 //FIXME: DON'T ECHO HTML FROM CORE!
 454                 echo '   <br><br><div style="text-align: center;"><a href="' . $location
 455                     . '/compose.php?saved_sent=yes&amp;session=' . $composesession . '">'
 456                     . _("Return") . '</a></div>';
 457             }
 458             exit();
 459         } else {
 460             if ( !isset($pageheader_sent) || !$pageheader_sent ) {
 461                 header("Location: $location/right_main.php?mailbox=" . urlencode($draft_folder) .
 462                    "&startMessage=1&note=".urlencode($draft_message));
 463             } else {
 464 //FIXME: DON'T ECHO HTML FROM CORE!
 465                 echo '   <br><br><div style="text-align: center;"><a href="' . $location
 466                     . '/right_main.php?mailbox=' . urlencode($draft_folder)
 467                     . '&amp;startMessage=1&amp;note=' . urlencode($draft_message) .'">'
 468                     . _("Return") . '</a></div>';
 469             }
 470             exit();
 471         }
 472     }
 473 }
 474
 475 if ($send) {
 476
 477     // validate security token
 478     //
 479     sm_validate_security_token($submitted_token, 3600, TRUE);
 480
 481     if (isset($_FILES['attachfile']) &&
 482             $_FILES['attachfile']['tmp_name'] &&
 483             $_FILES['attachfile']['tmp_name'] != 'none') {
 484         $AttachFailure = saveAttachedFiles($session);
 485     }
 486
 487     if (checkInput(false) && !isset($AttachFailure)) {
 488         if ($mailbox == "All Folders") {
 489             /* We entered compose via the search results page */
 490             $mailbox = 'INBOX'; /* Send 'em to INBOX, that's safe enough */
 491         }
 492         $urlMailbox = urlencode($mailbox);
 493         if (! isset($passed_id)) {
 494             $passed_id = 0;
 495         }
 496         /**
 497          * Set $default_charset to correspond with the user's selection
 498          * of language interface.
 499          */
 500         set_my_charset();
 501         /**
 502          * This is to change all newlines to \n
 503          * We'll change them to \r\n later (in the sendMessage function)
 504          */
 505         $body = str_replace("\r\n", "\n", $body);
 506         $body = str_replace("\r", "\n", $body);
 507
 508         /**
 509          * Rewrap $body so that no line is bigger than $editor_size
 510          */
 511         $body = explode("\n", $body);
 512         $newBody = '';
 513         foreach ($body as $line) {
 514             if( $line <> '-- ' ) {
 515                 $line = rtrim($line);
 516             }
 517             if (sq_strlen($line, $default_charset) <= $editor_size + 1) {
 518                 $newBody .= $line . "\n";
 519             } else {
 520                 sqWordWrap($line, $editor_size, $default_charset);
 521                 $newBody .= $line . "\n";
 522
 523             }
 524
 525         }
 526         $body = $newBody;
 527
 528         $Result = deliverMessage($composeMessage);
 529
 530         if ($Result)
 531             $mail_sent = 'yes';
 532         else
 533             $mail_sent = 'no';
 534
 535         // NOTE: this hook changed in 1.5.2 from sending $Result and
 536         //       $composeMessage as args #2 and #3 to being in an array
 537         //       under arg #2
 538         $temp = array(&$Result, &$composeMessage, &$mail_sent);
 539         do_hook('compose_send_after', $temp);
 540         if (! $Result) {
 541             showInputForm($session);
 542             exit();
 543         }
 544
 545         /* if it is resumed draft, delete draft message */
 546         if ( isset($delete_draft)) {
 547             $imap_stream = sqimap_login($username, false, $imapServerAddress, $imapPort, false);
 548             sqimap_mailbox_select($imap_stream, $draft_folder);
 549             // bypass_trash=true because message should be saved when deliverMessage() returns true.
 550             // in current implementation of sqimap_msgs_list_flag() single message id can
 551             // be submitted as string. docs state that it should be array.
 552             sqimap_msgs_list_delete($imap_stream, $draft_folder, $delete_draft, true);
 553             if ($auto_expunge) {
 554                 sqimap_mailbox_expunge($imap_stream, $draft_folder, true);
 555             }
 556             sqimap_logout($imap_stream);
 557         }
 558         /*
 559          * Store the error array in the session because they will be lost on a redirect
 560          */
 561         $oErrorHandler->saveDelayedErrors();
 562         session_write_close();
 563
 564         if ($compose_new_win == '1') {
 565             if ( !isset($pageheader_sent) || !$pageheader_sent ) {
 566                 header("Location: $location/compose.php?mail_sent=$mail_sent");
 567             } else {
 568 //FIXME: DON'T ECHO HTML FROM CORE!
 569                 echo '   <br><br><div style="text-align: center;"><a href="' . $location
 570                     . '/compose.php?mail_sent=$mail_sent">'
 571                     . _("Return") . '</a></div>';
 572             }
 573             exit();
 574         } else {
 575             if ( !isset($pageheader_sent) || !$pageheader_sent ) {
 576                 header("Location: $location/right_main.php?mailbox=$urlMailbox".
 577                     "&startMessage=$startMessage&mail_sent=$mail_sent");
 578             } else {
 579 //FIXME: DON'T ECHO HTML FROM CORE!
 580                 echo '   <br><br><div style="text-align: center;"><a href="' . $location
 581                     . "/right_main.php?mailbox=$urlMailbox"
 582                     . "&amp;startMessage=$startMessage&amp;mail_sent=$mail_sent\">"
 583                     . _("Return") . '</a></div>';
 584             }
 585             exit();
 586         }
 587     } else {
 588         if ($compose_new_win == '1') {
 589             compose_Header($color, $mailbox);
 590         }
 591         else {
 592             displayPageHeader($color, $mailbox);
 593         }
 594         if (isset($AttachFailure)) {
 595             plain_error_message(_("Could not move/copy file. File not attached"),
 596                     $color);
 597         }
 598         checkInput(true);
 599         showInputForm($session);
 600         /* sqimap_logout($imapConnection); */
 601     }
 602 } elseif (isset($html_addr_search_done)) {
 603
 604     // validate security token
 605     //
 606     sm_validate_security_token($submitted_token, 3600, TRUE);
 607
 608     if ($compose_new_win == '1') {
 609         compose_Header($color, $mailbox);
 610     }
 611     else {
 612         displayPageHeader($color, $mailbox);
 613     }
 614
 615     if (isset($send_to_search) && is_array($send_to_search)) {
 616         foreach ($send_to_search as $k => $v) {
 617             if (substr($k, 0, 1) == 'T') {
 618                 if ($send_to) {
 619                     $send_to .= ', ';
 620                 }
 621                 $send_to .= $v;
 622             }
 623             elseif (substr($k, 0, 1) == 'C') {
 624                 if ($send_to_cc) {
 625                     $send_to_cc .= ', ';
 626                 }
 627                 $send_to_cc .= $v;
 628             }
 629             elseif (substr($k, 0, 1) == 'B') {
 630                 if ($send_to_bcc) {
 631                     $send_to_bcc .= ', ';
 632                 }
 633                 $send_to_bcc .= $v;
 634             }
 635         }
 636     }
 637     showInputForm($session);
 638 } elseif (isset($html_addr_search) && !isset($html_addr_search_cancel)) {
 639     if (isset($_FILES['attachfile']) &&
 640             $_FILES['attachfile']['tmp_name'] &&
 641             $_FILES['attachfile']['tmp_name'] != 'none') {
 642         if(saveAttachedFiles($session)) {
 643             plain_error_message(_("Could not move/copy file. File not attached"));
 644         }
 645     }
 646     /*
 647      * I am using an include so as to elminiate an extra unnecessary
 648      * click.  If you can think of a better way, please implement it.
 649      */
 650     include_once('./addrbook_search_html.php');
 651 } elseif (isset($attach)) {
 652
 653     // validate security token
 654     //
 655     sm_validate_security_token($submitted_token, 3600, TRUE);
 656
 657     if ($compose_new_win == '1') {
 658         compose_Header($color, $mailbox);
 659     } else {
 660         displayPageHeader($color, $mailbox);
 661     }
 662     if (saveAttachedFiles($session)) {
 663         plain_error_message(_("Could not move/copy file. File not attached"));
 664     }
 665     showInputForm($session);
 666 }
 667 elseif (isset($sigappend)) {
 668
 669     // validate security token
 670     //
 671     sm_validate_security_token($submitted_token, 3600, TRUE);
 672
 673     $signature = $idents[$identity]['signature'];
 674
 675     $body .= "\n\n".($prefix_sig==true? "-- \n":'').$signature;
 676     if ($compose_new_win == '1') {
 677         compose_Header($color, $mailbox);
 678     } else {
 679         displayPageHeader($color, $mailbox);
 680     }
 681     showInputForm($session);
 682 } elseif (isset($do_delete)) {
 683
 684     // validate security token
 685     //
 686     sm_validate_security_token($submitted_token, 3600, TRUE);
 687
 688     if ($compose_new_win == '1') {
 689         compose_Header($color, $mailbox);
 690     } else {
 691         displayPageHeader($color, $mailbox);
 692     }
 693
 694     if (isset($delete) && is_array($delete)) {
 695         foreach($delete as $index) {
 696             if (!empty($composeMessage->entities) && isset($composeMessage->entities[$index])) {
 697                 $composeMessage->entities[$index]->purgeAttachments();
 698                 // FIXME: one person reported that unset() didn't do anything at all here, so this is a work-around... but it triggers PHP notices if the unset() doesn't work, which should be fixed... but bigger question is if unset() doesn't work here, what about everywhere else? Anyway, uncomment this if you think you need it
 699                 //$composeMessage->entities[$index] = NULL;
 700                 unset ($composeMessage->entities[$index]);
 701             }
 702         }
 703         $new_entities = array();
 704         foreach ($composeMessage->entities as $entity) {
 705             $new_entities[] = $entity;
 706         }
 707         $composeMessage->entities = $new_entities;
 708     }
 709     showInputForm($session);
 710 } else {
 711     /*
 712      * This handles the default case as well as the error case
 713      * (they had the same code) --> if (isset($smtpErrors))
 714      */
 715
 716     if ($compose_new_win == '1') {
 717         compose_Header($color, $mailbox);
 718     } else {
 719         displayPageHeader($color, $mailbox);
 720     }
 721
 722     $newmail = true;
 723
 724     if (!isset($passed_ent_id)) {
 725         $passed_ent_id = '';
 726     }
 727     if (!isset($passed_id)) {
 728         $passed_id = '';
 729     }
 730     if (!isset($mailbox)) {
 731         $mailbox = '';
 732     }
 733     if (!isset($action)) {
 734         $action = '';
 735     }
 736
 737     $values = newMail($mailbox,$passed_id,$passed_ent_id, $action, $session);
 738
 739     /* in case the origin is not read_body.php */
 740     if (isset($send_to)) {
 741         $values['send_to'] = $send_to;
 742     }
 743     if (isset($send_to_cc)) {
 744         $values['send_to_cc'] = $send_to_cc;
 745     }
 746     if (isset($send_to_bcc)) {
 747         $values['send_to_bcc'] = $send_to_bcc;
 748     }
 749     if (isset($subject)) {
 750         $values['subject'] = $subject;
 751     }
 752     showInputForm($session, $values);
 753 }
 754
 755 exit();
 756
 757 /**************** Only function definitions go below *************/
 758
 759 function getforwardSubject($subject)
 760 {
 761     if ((substr(strtolower($subject), 0, 4) != 'fwd:') &&
 762             (substr(strtolower($subject), 0, 5) != '[fwd:') &&
 763             (substr(strtolower($subject), 0, 6) != '[ fwd:')) {
 764         $subject = '[Fwd: ' . $subject . ']';
 765     }
 766     return $subject;
 767 }
 768
 769 /* This function is used when not sending or adding attachments */
 770 function newMail ($mailbox='', $passed_id='', $passed_ent_id='', $action='', $session='') {
 771     global $editor_size, $default_use_priority, $body, $idents,
 772         $use_signature, $data_dir, $username,
 773         $key, $imapServerAddress, $imapPort,
 774         $composeMessage, $body_quote, $request_mdn, $request_dr,
 775         $mdn_user_support, $languages, $squirrelmail_language,
 776         $default_charset;
 777
 778     /*
 779      * Set $default_charset to correspond with the user's selection
 780      * of language interface. $default_charset global is not correct,
 781      * if message is composed in new window.
 782      */
 783     set_my_charset();
 784
 785     $send_to = $send_to_cc = $send_to_bcc = $subject = $identity = '';
 786     $mailprio = 3;
 787
 788     if ($passed_id) {
 789         $imapConnection = sqimap_login($username, false, $imapServerAddress,
 790                 $imapPort, 0);
 791
 792         sqimap_mailbox_select($imapConnection, $mailbox);
 793         $message = sqimap_get_message($imapConnection, $passed_id, $mailbox);
 794
 795         $body = '';
 796         if ($passed_ent_id) {
 797             /* redefine the messsage in case of message/rfc822 */
 798             $message = $message->getEntity($passed_ent_id);
 799             /* message is an entity which contains the envelope and type0=message
 800              * and type1=rfc822. The actual entities are childs from
 801              * $message->entities[0]. That's where the encoding and is located
 802              */
 803
 804             $entities = $message->entities[0]->findDisplayEntity
 805                 (array(), $alt_order = array('text/plain'));
 806             if (!count($entities)) {
 807                 $entities = $message->entities[0]->findDisplayEntity
 808                     (array(), $alt_order = array('text/plain','text/html'));
 809             }
 810             $orig_header = $message->rfc822_header; /* here is the envelope located */
 811             /* redefine the message for picking up the attachments */
 812             $message = $message->entities[0];
 813
 814         } else {
 815             $entities = $message->findDisplayEntity (array(), $alt_order = array('text/plain'));
 816             if (!count($entities)) {
 817                 $entities = $message->findDisplayEntity (array(), $alt_order = array('text/plain','text/html'));
 818             }
 819             $orig_header = $message->rfc822_header;
 820         }
 821
 822         $type0 = $message->type0;
 823         $type1 = $message->type1;
 824         foreach ($entities as $ent) {
 825             $msg = $message->getEntity($ent);
 826             $type0 = $msg->type0;
 827             $type1 = $msg->type1;
 828             $unencoded_bodypart = mime_fetch_body($imapConnection, $passed_id, $ent);
 829             $body_part_entity = $message->getEntity($ent);
 830             $bodypart = decodeBody($unencoded_bodypart,
 831                     $body_part_entity->header->encoding);
 832             if ($type1 == 'html') {
 833                 $bodypart = str_replace("\n", ' ', $bodypart);
 834                 $bodypart = preg_replace(array('/<\/?p>/i','/<div><\/div>/i','/<br\s*(\/)*>/i','/<\/?div>/i'), "\n", $bodypart);
 835                 $bodypart = str_replace(array('&nbsp;','&gt;','&lt;'),array(' ','>','<'),$bodypart);
 836                 $bodypart = strip_tags($bodypart);
 837             }
 838             if (isset($languages[$squirrelmail_language]['XTRA_CODE']) &&
 839                     function_exists($languages[$squirrelmail_language]['XTRA_CODE'] . '_decode')) {
 840                 if (mb_detect_encoding($bodypart) != 'ASCII') {
 841                     $bodypart = call_user_func($languages[$squirrelmail_language]['XTRA_CODE'] . '_decode', $bodypart);
 842                 }
 843             }
 844
 845             // charset encoding in compose form stuff
 846             if (isset($body_part_entity->header->parameters['charset'])) {
 847                 $actual = $body_part_entity->header->parameters['charset'];
 848             } else {
 849                 $actual = 'us-ascii';
 850             }
 851
 852             if ( $actual && is_conversion_safe($actual) && $actual != $default_charset){
 853                 $bodypart = charset_convert($actual,$bodypart,$default_charset,false);
 854             }
 855             // end of charset encoding in compose
 856
 857             $body .= $bodypart;
 858         }
 859         if ($default_use_priority) {
 860             $mailprio = substr($orig_header->priority,0,1);
 861             if (!$mailprio) {
 862                 $mailprio = 3;
 863             }
 864         } else {
 865             $mailprio = '';
 866         }
 867
 868         $from_o = $orig_header->from;
 869         if (is_array($from_o)) {
 870             if (isset($from_o[0])) {
 871                 $from_o = $from_o[0];
 872             }
 873         }
 874         if (is_object($from_o)) {
 875             $orig_from = $from_o->getAddress();
 876         } else {
 877             $orig_from = '';
 878         }
 879
 880         $identities = array();
 881         if (count($idents) > 1) {
 882             foreach($idents as $nr=>$data) {
 883                 $enc_from_name = '"'.$data['full_name'].'" <'. $data['email_address'].'>';
 884                 if(strtolower($enc_from_name) == strtolower($orig_from)) {
 885                     $identity = $nr;
 886                     // don't stop!  need to build $identities array for idents match below
 887                     //break;
 888                 }
 889                 $identities[] = $enc_from_name;
 890             }
 891
 892             $identity_match = $orig_header->findAddress($identities);
 893             if ($identity_match) {
 894                 $identity = $identity_match;
 895             }
 896         }
 897
 898         switch ($action) {
 899             case ('draft'):
 900                 $use_signature = FALSE;
 901                 $composeMessage->rfc822_header = $orig_header;
 902                 $send_to = decodeHeader($orig_header->getAddr_s('to'),false,false,true);
 903                 $send_to_cc = decodeHeader($orig_header->getAddr_s('cc'),false,false,true);
 904                 $send_to_bcc = decodeHeader($orig_header->getAddr_s('bcc'),false,false,true);
 905                 $send_from = $orig_header->getAddr_s('from');
 906                 $send_from_parts = new AddressStructure();
 907                 $send_from_parts = $orig_header->parseAddress($send_from);
 908                 $send_from_add = $send_from_parts->mailbox . '@' . $send_from_parts->host;
 909                 $identity = find_identity(array($send_from_add));
 910                 $subject = decodeHeader($orig_header->subject,false,false,true);
 911
 912                 // Remember the receipt settings
 913                 $request_mdn = $mdn_user_support && !empty($orig_header->dnt) ? '1' : '0';
 914                 $request_dr = $mdn_user_support && !empty($orig_header->drnt) ? '1' : '0';
 915
 916                 /* remember the references and in-reply-to headers in case of an reply */
 917 //FIXME: it would be better to fiddle with headers inside of the message object or possibly when delivering the message to its destination (drafts folder?); is this possible?
 918                 $composeMessage->rfc822_header->more_headers['References'] = $orig_header->references;
 919                 $composeMessage->rfc822_header->more_headers['In-Reply-To'] = $orig_header->in_reply_to;
 920                 // rewrap the body to clean up quotations and line lengths
 921                 sqBodyWrap($body, $editor_size);
 922                 $composeMessage = getAttachments($message, $composeMessage, $passed_id, $entities, $imapConnection);
 923                 break;
 924             case ('edit_as_new'):
 925                 $send_to = decodeHeader($orig_header->getAddr_s('to'),false,false,true);
 926                 $send_to_cc = decodeHeader($orig_header->getAddr_s('cc'),false,false,true);
 927                 $send_to_bcc = decodeHeader($orig_header->getAddr_s('bcc'),false,false,true);
 928                 $subject = decodeHeader($orig_header->subject,false,false,true);
 929                 $mailprio = $orig_header->priority;
 930                 $orig_from = '';
 931                 $composeMessage = getAttachments($message, $composeMessage, $passed_id, $entities, $imapConnection);
 932                 // rewrap the body to clean up quotations and line lengths
 933                 sqBodyWrap($body, $editor_size);
 934                 break;
 935             case ('forward'):
 936                 $send_to = '';
 937                 $subject = getforwardSubject(decodeHeader($orig_header->subject,false,false,true));
 938                 $body = getforwardHeader($orig_header) . $body;
 939                 // the logic for calling sqUnWordWrap here would be to allow the browser to wrap the lines
 940                 // forwarded message text should be as undisturbed as possible, so commenting out this call
 941                 // sqUnWordWrap($body);
 942                 $composeMessage = getAttachments($message, $composeMessage, $passed_id, $entities, $imapConnection);
 943
 944                 //add a blank line after the forward headers
 945                 $body = "\n" . $body;
 946                 break;
 947             case ('forward_as_attachment'):
 948                 $subject = getforwardSubject(decodeHeader($orig_header->subject,false,false,true));
 949                 $composeMessage = getMessage_RFC822_Attachment($message, $composeMessage, $passed_id, $passed_ent_id, $imapConnection);
 950                 $body = '';
 951                 break;
 952             case ('reply_all'):
 953                 if(isset($orig_header->mail_followup_to) && $orig_header->mail_followup_to) {
 954                     $send_to = $orig_header->getAddr_s('mail_followup_to');
 955                 } else {
 956                     $send_to_cc = replyAllString($orig_header);
 957                     $send_to_cc = decodeHeader($send_to_cc,false,false,true);
 958                 }
 959             case ('reply'):
 960                 // skip this if send_to was already set right above here
 961                 if(!$send_to) {
 962                     $send_to = $orig_header->reply_to;
 963                     if (is_array($send_to) && count($send_to)) {
 964                         $send_to = $orig_header->getAddr_s('reply_to');
 965                     } else if (is_object($send_to)) { /* unneccesarry, just for failsafe purpose */
 966                         $send_to = $orig_header->getAddr_s('reply_to');
 967                     } else {
 968                         $send_to = $orig_header->getAddr_s('from');
 969                     }
 970                 }
 971                 $send_to = decodeHeader($send_to,false,false,true);
 972                 $subject = decodeHeader($orig_header->subject,false,false,true);
 973                 $subject = str_replace('"', "'", $subject);
 974                 $subject = trim($subject);
 975                 if (substr(strtolower($subject), 0, 3) != 're:') {
 976                     $subject = 'Re: ' . $subject;
 977                 }
 978                 /* this corrects some wrapping/quoting problems on replies */
 979                 $rewrap_body = explode("\n", $body);
 980                 $from = (is_array($orig_header->from) && !empty($orig_header->from)) ? $orig_header->from[0] : $orig_header->from;
 981                 $body = '';
 982                 $strip_sigs = getPref($data_dir, $username, 'strip_sigs');
 983                 foreach ($rewrap_body as $line) {
 984                     if ($strip_sigs && rtrim($line, "\r\n") == '-- ') {
 985                         break;
 986                     }
 987                     if (preg_match("/^(>+)/", $line, $matches)) {
 988                         $gt = $matches[1];
 989                         $body .= $body_quote . str_replace("\n", "\n$body_quote$gt ", rtrim($line)) ."\n";
 990                     } else {
 991                         $body .= $body_quote . (!empty($body_quote) ? ' ' : '') . str_replace("\n", "\n$body_quote" . (!empty($body_quote) ? ' ' : ''), rtrim($line)) . "\n";
 992                     }
 993                 }
 994
 995                 //rewrap the body to clean up quotations and line lengths
 996                 $body = sqBodyWrap ($body, $editor_size);
 997
 998                 $body = getReplyCitation($from , $orig_header->date) . $body;
 999                 $composeMessage->reply_rfc822_header = $orig_header;
1000
1001                 break;
1002             default:
1003                 break;
1004         }
1005 //FIXME: we used to register $compose_messages in the session here, but not any more - so do we still need the session_write_close() and sqimap_logout() here?  We probably need the IMAP logout, but what about the session closure?
1006         session_write_close();
1007         sqimap_logout($imapConnection);
1008     }
1009     $ret = array( 'send_to' => $send_to,
1010             'send_to_cc' => $send_to_cc,
1011             'send_to_bcc' => $send_to_bcc,
1012             'subject' => $subject,
1013             'mailprio' => $mailprio,
1014             'body' => $body,
1015             'identity' => $identity );
1016
1017     return ($ret);
1018 } /* function newMail() */
1019
1020 /**
1021  * downloads attachments from original message, stores them in attachment directory and adds
1022  * them to composed message.
1023  * @param object $message
1024  * @param object $composeMessage
1025  * @param integer $passed_id
1026  * @param mixed $entities
1027  * @param mixed $imapConnection
1028  * @return object
1029  */
1030 function getAttachments($message, &$composeMessage, $passed_id, $entities, $imapConnection) {
1031     global $squirrelmail_language, $languages, $username, $attachment_dir;
1032
1033     if (!count($message->entities) ||
1034             ($message->type0 == 'message' && $message->type1 == 'rfc822')) {
1035         if ( !in_array($message->entity_id, $entities) && $message->entity_id) {
1036             switch ($message->type0) {
1037                 case 'message':
1038                     if ($message->type1 == 'rfc822') {
1039                         $filename = $message->rfc822_header->subject;
1040                         if ($filename == "") {
1041                             $filename = "untitled-".$message->entity_id;
1042                         }
1043                         $filename .= '.eml';
1044                     } else {
1045                         $filename = $message->getFilename();
1046                     }
1047                     break;
1048                 default:
1049                     if (!$message->mime_header) { /* temporary hack */
1050                         $message->mime_header = $message->header;
1051                     }
1052                     $filename = $message->getFilename();
1053                     break;
1054             }
1055             $filename = str_replace('&#32;', ' ', decodeHeader($filename));
1056             if (isset($languages[$squirrelmail_language]['XTRA_CODE']) &&
1057                     function_exists($languages[$squirrelmail_language]['XTRA_CODE'] . '_encode')) {
1058                 $filename =  call_user_func($languages[$squirrelmail_language]['XTRA_CODE'] . '_encode', $filename);
1059             }
1060
1061             $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
1062             $localfilename = sq_get_attach_tempfile();
1063             $message->att_local_name = $localfilename;
1064
1065             $composeMessage->initAttachment($message->type0.'/'.$message->type1,$filename,
1066                     $localfilename);
1067
1068             /* Write Attachment to file */
1069             $fp = fopen ($hashed_attachment_dir . '/' . $localfilename, 'wb');
1070             mime_print_body_lines ($imapConnection, $passed_id, $message->entity_id, $message->header->encoding, $fp);
1071             fclose ($fp);
1072         }
1073     } else {
1074         for ($i=0, $entCount=count($message->entities); $i<$entCount;$i++) {
1075             $composeMessage=getAttachments($message->entities[$i], $composeMessage, $passed_id, $entities, $imapConnection);
1076         }
1077     }
1078     return $composeMessage;
1079 }
1080
1081 function getMessage_RFC822_Attachment($message, $composeMessage, $passed_id,
1082         $passed_ent_id='', $imapConnection) {
1083     if (!$passed_ent_id) {
1084         $body_a = sqimap_run_command($imapConnection,
1085                 'FETCH '.$passed_id.' RFC822',
1086                 TRUE, $response, $readmessage,
1087                 TRUE);
1088     } else {
1089         $body_a = sqimap_run_command($imapConnection,
1090                 'FETCH '.$passed_id.' BODY['.$passed_ent_id.']',
1091                 TRUE, $response, $readmessage, TRUE);
1092         $message = $message->parent;
1093     }
1094     if ($response == 'OK') {
1095         $subject = encodeHeader($message->rfc822_header->subject);
1096         array_shift($body_a);
1097         array_pop($body_a);
1098         $body = implode('', $body_a) . "\r\n";
1099
1100         global $username, $attachment_dir;
1101         $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
1102         $localfilename = sq_get_attach_tempfile();
1103         $fp = fopen($hashed_attachment_dir . '/' . $localfilename, 'wb');
1104         fwrite ($fp, $body);
1105         fclose($fp);
1106         $composeMessage->initAttachment('message/rfc822',$subject.'.eml',
1107                 $localfilename);
1108     }
1109     return $composeMessage;
1110 }
1111
1112 function showInputForm ($session, $values=false) {
1113     global $send_to, $send_to_cc, $send_to_bcc,
1114         $body, $startMessage, $action, $attachments,
1115         $use_signature, $signature, $prefix_sig, $session_expired,
1116         $editor_size, $editor_height, $subject, $newmail,
1117         $use_javascript_addr_book, $passed_id, $mailbox, $fwduid,
1118         $from_htmladdr_search, $location_of_buttons, $attachment_dir,
1119         $username, $data_dir, $identity, $idents, $delete_draft,
1120         $mailprio, $compose_new_win, $saved_draft, $mail_sent, $sig_first,
1121         $composeMessage, $composesession, $default_charset,
1122         $compose_onsubmit, $oTemplate, $oErrorHandler;
1123
1124     if (checkForJavascript()) {
1125         $onfocus = ' onfocus="alreadyFocused=true;"';
1126         $onfocus_array = array('onfocus' => 'alreadyFocused=true;');
1127     }
1128     else {
1129         $onfocus = '';
1130         $onfocus_array = array();
1131     }
1132
1133     if ($values) {
1134         $send_to = $values['send_to'];
1135         $send_to_cc = $values['send_to_cc'];
1136         $send_to_bcc = $values['send_to_bcc'];
1137         $subject = $values['subject'];
1138         $mailprio = $values['mailprio'];
1139         $body = $values['body'];
1140         $identity = (int) $values['identity'];
1141     } else {
1142         $send_to = decodeHeader($send_to, true, false);
1143         $send_to_cc = decodeHeader($send_to_cc, true, false);
1144         $send_to_bcc = decodeHeader($send_to_bcc, true, false);
1145     }
1146
1147     if ($use_javascript_addr_book) {
1148 //FIXME: NO HTML IN CORE!
1149         echo "\n". '<script type="text/javascript">'."\n<!--\n" .
1150             'function open_abook() { ' . "\n" .
1151             '  var nwin = window.open("addrbook_popup.php","abookpopup",' .
1152             '"width=670,height=300,resizable=yes,scrollbars=yes");' . "\n" .
1153             '  if((!nwin.opener) && (document.windows != null))' . "\n" .
1154             '    nwin.opener = document.windows;' . "\n" .
1155             "}\n" .
1156             "// -->\n</script>\n\n";
1157     }
1158
1159 //FIXME: NO HTML IN CORE!
1160     echo "\n" . '<form name="compose" action="compose.php" method="post" ' .
1161         'enctype="multipart/form-data"';
1162
1163     $compose_onsubmit = array();
1164     global $null;
1165     do_hook('compose_form', $null);
1166
1167     // Plugins that use compose_form hook can add an array entry
1168     // to the globally scoped $compose_onsubmit; we add them up
1169     // here and format the form tag's full onsubmit handler.
1170     // Each plugin should use "return false" if they need to
1171     // stop form submission but otherwise should NOT use "return
1172     // true" to give other plugins the chance to do what they need
1173     // to do; SquirrelMail itself will add the final "return true".
1174     // Onsubmit text is enclosed inside of double quotes, so plugins
1175     // need to quote accordingly.
1176     if (checkForJavascript()) {
1177         if (empty($compose_onsubmit))
1178             $compose_onsubmit = array();
1179         else if (!is_array($compose_onsubmit))
1180             $compose_onsubmit = array($compose_onsubmit);
1181
1182         $onsubmit_text = '';
1183         foreach ($compose_onsubmit as $text) {
1184             $text = trim($text);
1185             if (!empty($text)) {
1186                 if (substr($text, -1) != ';' && substr($text, -1) != '}')
1187                     $text .= '; ';
1188                 $onsubmit_text .= $text;
1189             }
1190         }
1191
1192         if (!empty($onsubmit_text))
1193 //FIXME: DON'T ECHO HTML FROM CORE!
1194             echo ' onsubmit="' . $onsubmit_text . ' return true;"';
1195     }
1196
1197
1198 //FIXME: NO HTML IN CORE!
1199     echo ">\n";
1200
1201 //FIXME: DON'T ECHO HTML FROM CORE!
1202     echo addHidden('smtoken', sm_generate_security_token());
1203
1204 //FIXME: DON'T ECHO HTML FROM CORE!
1205     echo addHidden('startMessage', $startMessage);
1206
1207     if ($action == 'draft') {
1208 //FIXME: DON'T ECHO HTML FROM CORE!
1209         echo addHidden('delete_draft', $passed_id);
1210     }
1211     if (isset($delete_draft)) {
1212 //FIXME: DON'T ECHO HTML FROM CORE!
1213         echo addHidden('delete_draft', $delete_draft);
1214     }
1215     if (isset($session)) {
1216 //FIXME: DON'T ECHO HTML FROM CORE!
1217         echo addHidden('session', $session);
1218     }
1219
1220     if (isset($passed_id)) {
1221 //FIXME: DON'T ECHO HTML FROM CORE!
1222         echo addHidden('passed_id', $passed_id);
1223     }
1224
1225     if (isset($fwduid)) {
1226 //FIXME: DON'T ECHO HTML FROM CORE!
1227         echo addHidden('fwduid', $fwduid);
1228     }
1229
1230     if ($saved_draft == 'yes') {
1231         $oTemplate->assign('note', _("Your draft has been saved."));
1232         $oTemplate->display('note.tpl');
1233     }
1234     if ($mail_sent == 'yes') {
1235         $oTemplate->assign('note', _("Your mail has been sent."));
1236         $oTemplate->display('note.tpl');
1237     }
1238     if ($compose_new_win == '1') {
1239         $oTemplate->display('compose_newwin_close.tpl');
1240     }
1241
1242     if ($location_of_buttons == 'top') {
1243 //FIXME: DON'T ECHO HTML FROM CORE!
1244         showComposeButtonRow();
1245     }
1246
1247     $identities = array();
1248     if (count($idents) > 1) {
1249         reset($idents);
1250         foreach($idents as $id => $data) {
1251             $identities[$id] = $data['full_name'].' &lt;'.$data['email_address'].'&gt;';
1252         }
1253     }
1254
1255     $oTemplate->assign('identities', $identities);
1256     $oTemplate->assign('identity_def', $identity);
1257     $oTemplate->assign('input_onfocus', 'onfocus="'.join(' ', $onfocus_array).'"');
1258
1259     $oTemplate->assign('to', htmlspecialchars($send_to));
1260     $oTemplate->assign('cc', htmlspecialchars($send_to_cc));
1261     $oTemplate->assign('bcc', htmlspecialchars($send_to_bcc));
1262     $oTemplate->assign('subject', htmlspecialchars($subject));
1263
1264     // access keys...
1265     //
1266     global $accesskey_compose_to, $accesskey_compose_cc,
1267            $accesskey_compose_identity, $accesskey_compose_bcc,
1268            $accesskey_compose_subject;
1269     $oTemplate->assign('accesskey_compose_identity', $accesskey_compose_identity);
1270     $oTemplate->assign('accesskey_compose_to', $accesskey_compose_to);
1271     $oTemplate->assign('accesskey_compose_cc', $accesskey_compose_cc);
1272     $oTemplate->assign('accesskey_compose_bcc', $accesskey_compose_bcc);
1273     $oTemplate->assign('accesskey_compose_subject', $accesskey_compose_subject);
1274
1275     $oTemplate->display('compose_header.tpl');
1276
1277     if ($location_of_buttons == 'between') {
1278 //FIXME: DON'T ECHO HTML FROM CORE!
1279         showComposeButtonRow();
1280     }
1281
1282     $body_str = '';
1283     if ($use_signature == true && $newmail == true && !isset($from_htmladdr_search)) {
1284         $signature = $idents[$identity]['signature'];
1285
1286         if ($sig_first == '1') {
1287             /*
1288              * FIXME: test is specific to ja_JP translation implementation.
1289              * This test might apply incorrect conversion to other translations, but
1290              * use of 7bit iso-2022-jp charset in other translations might have other
1291              * issues too.
1292              */
1293             if ($default_charset == 'iso-2022-jp') {
1294                 $body_str = "\n\n".($prefix_sig==true? "-- \n":'').mb_convert_encoding($signature, 'EUC-JP');
1295             } else {
1296                 $body_str = "\n\n".($prefix_sig==true? "-- \n":'').decodeHeader($signature,false,false);
1297             }
1298             $body_str .= "\n\n".htmlspecialchars(decodeHeader($body,false,false));
1299         } else {
1300             $body_str = "\n\n".htmlspecialchars(decodeHeader($body,false,false));
1301             // FIXME: test is specific to ja_JP translation implementation. See above comments.
1302             if ($default_charset == 'iso-2022-jp') {
1303                 $body_str .= "\n\n".($prefix_sig==true? "-- \n":'').mb_convert_encoding($signature, 'EUC-JP');
1304             } else {
1305                 $body_str .= "\n\n".($prefix_sig==true? "-- \n":'').decodeHeader($signature,false,false);
1306             }
1307         }
1308     } else {
1309         $body_str = htmlspecialchars(decodeHeader($body,false,false));
1310     }
1311
1312     $oTemplate->assign('editor_width', (int)$editor_size);
1313     $oTemplate->assign('editor_height', (int)$editor_height);
1314     $oTemplate->assign('input_onfocus', 'onfocus="'.join(' ', $onfocus_array).'"');
1315     $oTemplate->assign('body', $body_str);
1316     $oTemplate->assign('show_bottom_send', $location_of_buttons!='bottom');
1317
1318     // access keys...
1319     //
1320     global $accesskey_compose_body, $accesskey_compose_send;
1321     $oTemplate->assign('accesskey_compose_body', $accesskey_compose_body);
1322     $oTemplate->assign('accesskey_compose_send', $accesskey_compose_send);
1323
1324     $oTemplate->display ('compose_body.tpl');
1325
1326     if ($location_of_buttons == 'bottom') {
1327 //FIXME: DON'T ECHO HTML FROM CORE!
1328         showComposeButtonRow();
1329     }
1330
1331     // composeMessage can be empty when coming from a restored session
1332     if (is_object($composeMessage) && $composeMessage->entities)
1333         $attach_array = $composeMessage->entities;
1334     if ($session_expired && !empty($attachments) && is_array($attachments))
1335         $attach_array = $attachments;
1336
1337     /* This code is for attachments */
1338     if ((bool) ini_get('file_uploads')) {
1339
1340         /* Calculate the max size for an uploaded file.
1341          * This is advisory for the user because we can't actually prevent
1342          * people to upload too large files. */
1343         $sizes = array();
1344         /* php.ini vars which influence the max for uploads */
1345         $configvars = array('post_max_size', 'memory_limit', 'upload_max_filesize');
1346         foreach($configvars as $var) {
1347             /* skip 0 or empty values, and -1 which means 'unlimited' */
1348             if( $size = getByteSize(ini_get($var)) ) {
1349                 if ( $size != '-1' ) {
1350                     $sizes[] = $size;
1351                 }
1352             }
1353         }
1354
1355         $attach = array();
1356         global $username, $attachment_dir;
1357         $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
1358         if (!empty($attach_array)) {
1359             foreach ($attach_array as $key => $attachment) {
1360                 $attached_file = $attachment->att_local_name;
1361                 if ($attachment->att_local_name || $attachment->body_part) {
1362                     $attached_filename = decodeHeader($attachment->mime_header->getParameter('name'));
1363                     $type = $attachment->mime_header->type0.'/'.
1364                         $attachment->mime_header->type1;
1365
1366                     $a = array();
1367                     $a['Key'] = $key;
1368                     $a['FileName'] = $attached_filename;
1369                     $a['ContentType'] = $type;
1370                     $a['Size'] = filesize($hashed_attachment_dir . '/' . $attached_file);
1371                     $attach[$key] = $a;
1372                 }
1373             }
1374         }
1375
1376         $max = min($sizes);
1377         $oTemplate->assign('max_file_size', empty($max) ? -1 : $max);
1378         $oTemplate->assign('attachments', $attach);
1379
1380         // access keys...
1381         //
1382         global $accesskey_compose_attach_browse, $accesskey_compose_attach,
1383                $accesskey_compose_delete_attach;
1384         $oTemplate->assign('accesskey_compose_attach_browse', $accesskey_compose_attach_browse);
1385         $oTemplate->assign('accesskey_compose_attach', $accesskey_compose_attach);
1386         $oTemplate->assign('accesskey_compose_delete_attach', $accesskey_compose_delete_attach);
1387
1388         $oTemplate->display('compose_attachments.tpl');
1389     } // End of file_uploads if-block
1390     /* End of attachment code */
1391
1392     $oTemplate->assign('username', $username);
1393     $oTemplate->assign('smaction', $action);
1394     $oTemplate->assign('mailbox', $mailbox);
1395     sqgetGlobalVar('QUERY_STRING', $queryString, SQ_SERVER);
1396     $oTemplate->assign('querystring', $queryString);
1397     $oTemplate->assign('composesession', $composesession);
1398     $oTemplate->assign('send_button_count', unique_widget_name('send', TRUE));
1399     if (!empty($attach_array))
1400         $oTemplate->assign('attachments', urlencode(serialize($attach_array)));
1401
1402     $aUserNotices = array();
1403
1404     // File uploads are off, so we didn't show that part of the form.
1405     // To avoid bogus bug reports, tell the user why.
1406     if (!(bool) ini_get('file_uploads')) {
1407         $aUserNotices[] = _("Because PHP file uploads are turned off, you can not attach files to this message. Please see your system administrator for details.");
1408     }
1409
1410     $oTemplate->assign('user_notices', $aUserNotices);
1411
1412     $oTemplate->display('compose_form_close.tpl');
1413
1414     if ($compose_new_win=='1') {
1415         $oTemplate->display('compose_newwin_close.tpl');
1416     }
1417
1418     $oErrorHandler->setDelayedErrors(false);
1419     $oTemplate->display('footer.tpl');
1420 }
1421
1422
1423 function showComposeButtonRow() {
1424     global $use_javascript_addr_book, $save_as_draft,
1425         $default_use_priority, $mailprio, $default_use_mdn,
1426         $request_mdn, $request_dr,
1427         $data_dir, $username;
1428
1429     global $oTemplate, $buffer_hook;
1430
1431     if ($default_use_priority) {
1432         $priorities = array('1'=>_("High"), '3'=>_("Normal"), '5'=>_("Low"));
1433         $priority = isset($mailprio) ? $mailprio : 3;
1434     } else {
1435         $priorities = array();
1436         $priority = NULL;
1437     }
1438
1439     $mdn_user_support=getPref($data_dir, $username, 'mdn_user_support',$default_use_mdn);
1440
1441     $address_book_button_attribs = array();
1442     global $accesskey_compose_addresses;
1443     if ($accesskey_compose_addresses != 'NONE')
1444         $address_book_button_attribs['accesskey'] = $accesskey_compose_addresses;
1445     if ($use_javascript_addr_book && checkForJavascript()) {
1446         $addr_book = addButton(_("Addresses"),
1447                                null,
1448                                array_merge($address_book_button_attribs, array('onclick' => 'javascript:open_abook();')));
1449     } else {
1450         $addr_book = addSubmit(_("Addresses"), 'html_addr_search', $address_book_button_attribs);
1451     }
1452
1453     $oTemplate->assign('allow_priority', $default_use_priority==1);
1454     $oTemplate->assign('priority_list', $priorities);
1455     $oTemplate->assign('current_priority', $priority);
1456
1457     $oTemplate->assign('notifications_enabled', $mdn_user_support==1);
1458     $oTemplate->assign('read_receipt', $request_mdn=='1');
1459     $oTemplate->assign('delivery_receipt', $request_dr=='1');
1460
1461     $oTemplate->assign('drafts_enabled', $save_as_draft);
1462     $oTemplate->assign('address_book_button', $addr_book);
1463
1464     // access keys...
1465     //
1466     global $accesskey_compose_priority, $accesskey_compose_on_read,
1467            $accesskey_compose_on_delivery, $accesskey_compose_signature,
1468            $accesskey_compose_save_draft, $accesskey_compose_send;
1469     $oTemplate->assign('accesskey_compose_priority', $accesskey_compose_priority);
1470     $oTemplate->assign('accesskey_compose_on_read', $accesskey_compose_on_read);
1471     $oTemplate->assign('accesskey_compose_on_delivery', $accesskey_compose_on_delivery);
1472     $oTemplate->assign('accesskey_compose_signature', $accesskey_compose_signature);
1473     $oTemplate->assign('accesskey_compose_save_draft', $accesskey_compose_save_draft);
1474     $oTemplate->assign('accesskey_compose_send', $accesskey_compose_send);
1475
1476     $oTemplate->display('compose_buttons.tpl');
1477 }
1478
1479 function checkInput ($show) {
1480     /*
1481      * I implemented the $show variable because the error messages
1482      * were getting sent before the page header.  So, I check once
1483      * using $show=false, and then when i'm ready to display the error
1484      * message, show=true
1485      */
1486     global $send_to, $send_to_cc, $send_to_bcc;
1487
1488     $send_to = trim($send_to);
1489     $send_to_cc = trim($send_to_cc);
1490     $send_to_bcc = trim($send_to_bcc);
1491     if (empty($send_to) && empty($send_to_cc) && empty($send_to_bcc)) {
1492         if ($show) {
1493             plain_error_message(_("You have not filled in the \"To:\" field."));
1494         }
1495         return false;
1496     }
1497     return true;
1498 } /* function checkInput() */
1499
1500
1501 /* True if FAILURE */
1502 function saveAttachedFiles($session) {
1503     global $composeMessage, $username, $attachment_dir;
1504
1505     /* get out of here if no file was attached at all */
1506     if (! is_uploaded_file($_FILES['attachfile']['tmp_name']) ) {
1507         return true;
1508     }
1509
1510     $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
1511     $localfilename = sq_get_attach_tempfile();
1512     $fullpath = $hashed_attachment_dir . '/' . $localfilename;
1513
1514     // m_u_f works better with restricted PHP installs (safe_mode, open_basedir),
1515     // if that doesn't work, try a simple rename.
1516     if (!sq_call_function_suppress_errors('move_uploaded_file', array($_FILES['attachfile']['tmp_name'], $fullpath))) {
1517         if (!sq_call_function_suppress_errors('rename', array($_FILES['attachfile']['tmp_name'], $fullpath))) {
1518             return true;
1519         }
1520     }
1521     $type = strtolower($_FILES['attachfile']['type']);
1522     $name = $_FILES['attachfile']['name'];
1523     $composeMessage->initAttachment($type, $name, $localfilename);
1524 }
1525
1526 /**
1527   * Parse strings such as "8M" and "2k" into their corresponding size in bytes
1528   *
1529   * NOTE: This function only recognizes the suffixes "K", "M" and "G"
1530   *       and will probably break very easily if the given size is in
1531   *       some completely different format.
1532   *
1533   * @param string $ini_size The input string to be converted
1534   *
1535   * @return mixed Boolean FALSE if something went wrong (the value passed in
1536   *               was empty?, the suffix was not recognized?), otherwise, the
1537   *               converted size in bytes (just the number (as an integer),
1538   *               no unit identifier included)
1539   *
1540   */
1541 function getByteSize($ini_size) {
1542
1543     if(!$ini_size) {
1544         return FALSE;
1545     }
1546
1547     $ini_size = trim($ini_size);
1548
1549     // if there's some kind of letter at the end of the string we need to multiply.
1550     if(!is_numeric(substr($ini_size, -1))) {
1551
1552         switch(strtoupper(substr($ini_size, -1))) {
1553             case 'G':
1554                 $bytesize = 1073741824;
1555                 break;
1556             case 'M':
1557                 $bytesize = 1048576;
1558                 break;
1559             case 'K':
1560                 $bytesize = 1024;
1561                 break;
1562              default:
1563                 return FALSE;
1564         }
1565
1566         return ($bytesize * (int)substr($ini_size, 0, -1));
1567     }
1568
1569     return $ini_size;
1570 }
1571
1572
1573 /**
1574  * temporary function to make use of the deliver class.
1575  * In the future the responsible backend should be automaticly loaded
1576  * and conf.pl should show a list of available backends.
1577  * The message also should be constructed by the message class.
1578  *
1579  * @param object $composeMessage The message being sent.  Please note
1580  *                               that it is passed by reference and
1581  *                               will be returned modified, with additional
1582  *                               headers, such as Message-ID, Date, In-Reply-To,
1583  *                               References, and so forth.
1584  *
1585  * @return boolean FALSE if delivery failed, or some non-FALSE value
1586  *                 upon success.
1587  *
1588  */
1589 function deliverMessage(&$composeMessage, $draft=false) {
1590     global $send_to, $send_to_cc, $send_to_bcc, $mailprio, $subject, $body,
1591         $username, $identity, $idents, $data_dir,
1592         $request_mdn, $request_dr, $default_charset, $useSendmail,
1593         $domain, $action, $default_move_to_sent, $move_to_sent,
1594         $imapServerAddress, $imapPort, $sent_folder, $key;
1595
1596     $rfc822_header = $composeMessage->rfc822_header;
1597
1598     $abook = addressbook_init(false, true);
1599     $rfc822_header->to = $rfc822_header->parseAddress($send_to,true, array(), '', $domain, array(&$abook,'lookup'));
1600     $rfc822_header->cc = $rfc822_header->parseAddress($send_to_cc,true,array(), '',$domain, array(&$abook,'lookup'));
1601     $rfc822_header->bcc = $rfc822_header->parseAddress($send_to_bcc,true, array(), '',$domain, array(&$abook,'lookup'));
1602     $rfc822_header->priority = $mailprio;
1603     $rfc822_header->subject = $subject;
1604
1605     $special_encoding='';
1606     if (strtolower($default_charset) == 'iso-2022-jp') {
1607         if (mb_detect_encoding($body) == 'ASCII') {
1608             $special_encoding = '8bit';
1609         } else {
1610             $body = mb_convert_encoding($body, 'JIS');
1611             $special_encoding = '7bit';
1612         }
1613     }
1614     $composeMessage->setBody($body);
1615
1616     $reply_to = '';
1617     $reply_to  = $idents[$identity]['reply_to'];
1618
1619     $from_addr = build_from_header($identity);
1620     $rfc822_header->from = $rfc822_header->parseAddress($from_addr,true);
1621     if ($reply_to) {
1622         $rfc822_header->reply_to = $rfc822_header->parseAddress($reply_to,true);
1623     }
1624     /* Receipt: On Read */
1625     if (isset($request_mdn) && $request_mdn) {
1626         $rfc822_header->dnt = $rfc822_header->parseAddress($from_addr,true);
1627     } elseif (isset($rfc822_header->dnt)) {
1628         unset($rfc822_header->dnt);
1629     }
1630
1631     /* Receipt: On Delivery */
1632     if (!empty($request_dr)) {
1633 //FIXME: it would be better to fiddle with headers inside of the message object or possibly when delivering the message to its destination; is this possible?
1634         $rfc822_header->more_headers['Return-Receipt-To'] = $from_addr;
1635     } elseif (isset($rfc822_header->more_headers['Return-Receipt-To'])) {
1636         unset($rfc822_header->more_headers['Return-Receipt-To']);
1637     }
1638
1639     /* multipart messages */
1640     if (count($composeMessage->entities)) {
1641         $message_body = new Message();
1642         $message_body->body_part = $composeMessage->body_part;
1643         $composeMessage->body_part = '';
1644         $mime_header = new MessageHeader;
1645         $mime_header->type0 = 'text';
1646         $mime_header->type1 = 'plain';
1647         if ($special_encoding) {
1648             $mime_header->encoding = $special_encoding;
1649         } else {
1650             $mime_header->encoding = '8bit';
1651         }
1652         if ($default_charset) {
1653             $mime_header->parameters['charset'] = $default_charset;
1654         }
1655         $message_body->mime_header = $mime_header;
1656         array_unshift($composeMessage->entities, $message_body);
1657         $content_type = new ContentType('multipart/mixed');
1658     } else {
1659         $content_type = new ContentType('text/plain');
1660         if ($special_encoding) {
1661             $rfc822_header->encoding = $special_encoding;
1662         } else {
1663             $rfc822_header->encoding = '8bit';
1664         }
1665         if ($default_charset) {
1666             $content_type->properties['charset']=$default_charset;
1667         }
1668     }
1669
1670     $rfc822_header->content_type = $content_type;
1671     $composeMessage->rfc822_header = $rfc822_header;
1672     if ($action == 'reply' || $action == 'reply_all') {
1673         global $passed_id, $passed_ent_id;
1674         $reply_id = $passed_id;
1675         $reply_ent_id = $passed_ent_id;
1676     } else {
1677         $reply_id = '';
1678         $reply_ent_id = '';
1679     }
1680
1681     /* Here you can modify the message structure just before we hand
1682        it over to deliver; plugin authors note that $composeMessage
1683        is sent and modified by reference since 1.5.2 */
1684     do_hook('compose_send', $composeMessage);
1685
1686     if (!$useSendmail && !$draft) {
1687         require_once(SM_PATH . 'class/deliver/Deliver_SMTP.class.php');
1688         $deliver = new Deliver_SMTP();
1689         global $smtpServerAddress, $smtpPort, $pop_before_smtp, $pop_before_smtp_host;
1690
1691         $authPop = (isset($pop_before_smtp) && $pop_before_smtp) ? true : false;
1692         if (empty($pop_before_smtp_host)) $pop_before_smtp_host = $smtpServerAddress;
1693         get_smtp_user($user, $pass);
1694         $stream = $deliver->initStream($composeMessage,$domain,0,
1695                 $smtpServerAddress, $smtpPort, $user, $pass, $authPop, $pop_before_smtp_host);
1696     } elseif (!$draft) {
1697         require_once(SM_PATH . 'class/deliver/Deliver_SendMail.class.php');
1698         global $sendmail_path, $sendmail_args;
1699         // Check for outdated configuration
1700         if (!isset($sendmail_args)) {
1701             if ($sendmail_path=='/var/qmail/bin/qmail-inject') {
1702                 $sendmail_args = '';
1703             } else {
1704                 $sendmail_args = '-i -t';
1705             }
1706         }
1707         $deliver = new Deliver_SendMail(array('sendmail_args'=>$sendmail_args));
1708         $stream = $deliver->initStream($composeMessage,$sendmail_path);
1709     } elseif ($draft) {
1710         global $draft_folder;
1711         $imap_stream = sqimap_login($username, false, $imapServerAddress,
1712                 $imapPort, 0);
1713         if (sqimap_mailbox_exists ($imap_stream, $draft_folder)) {
1714             require_once(SM_PATH . 'class/deliver/Deliver_IMAP.class.php');
1715             $imap_deliver = new Deliver_IMAP();
1716             $success = $imap_deliver->mail($composeMessage, $imap_stream, $reply_id, $reply_ent_id, $imap_stream, $draft_folder);
1717             sqimap_logout($imap_stream);
1718             unset ($imap_deliver);
1719             $composeMessage->purgeAttachments();
1720             return $success;
1721         } else {
1722             $msg  = '<br />'.sprintf(_("Error: Draft folder %s does not exist."), htmlspecialchars($draft_folder));
1723             plain_error_message($msg);
1724             return false;
1725         }
1726     }
1727     $success = false;
1728     if ($stream) {
1729         $deliver->mail($composeMessage, $stream, $reply_id, $reply_ent_id);
1730         $success = $deliver->finalizeStream($stream);
1731     }
1732     if (!$success) {
1733         // $deliver->dlv_server_msg is not always server's reply
1734         $msg = _("Message not sent.") . "<br />\n" .
1735             $deliver->dlv_msg;
1736         if (!empty($deliver->dlv_server_msg)) {
1737             // add 'server replied' part only when it is not empty.
1738             // Delivery error can be generated by delivery class itself
1739             $msg.='<br />' .
1740                 _("Server replied:") . ' ' . $deliver->dlv_ret_nr . ' ' .
1741                 nl2br(htmlspecialchars($deliver->dlv_server_msg));
1742         }
1743         plain_error_message($msg);
1744     } else {
1745         unset ($deliver);
1746         $imap_stream = sqimap_login($username, false, $imapServerAddress, $imapPort, 0);
1747
1748
1749         // mark as replied or forwarded if applicable
1750         //
1751         global $what, $iAccount, $startMessage, $passed_id, $fwduid, $mailbox;
1752
1753         if ($action=='reply' || $action=='reply_all' || $action=='forward' || $action=='forward_as_attachment') {
1754             require(SM_PATH . 'functions/mailbox_display.php');
1755             $aMailbox = sqm_api_mailbox_select($imap_stream, $iAccount, $mailbox,array('setindex' => $what, 'offset' => $startMessage),array());
1756             switch($action) {
1757             case 'reply':
1758             case 'reply_all':
1759                 // check if we are allowed to set the \\Answered flag
1760                 if (in_array('\\answered',$aMailbox['PERMANENTFLAGS'], true)) {
1761                     $aUpdatedMsgs = sqimap_toggle_flag($imap_stream, array($passed_id), '\\Answered', true, false);
1762                     if (isset($aUpdatedMsgs[$passed_id]['FLAGS'])) {
1763                         /**
1764                         * Only update the cached headers if the header is
1765                         * cached.
1766                         */
1767                         if (isset($aMailbox['MSG_HEADERS'][$passed_id])) {
1768                             $aMailbox['MSG_HEADERS'][$passed_id]['FLAGS'] = $aMsg['FLAGS'];
1769                         }
1770                     }
1771                 }
1772                 break;
1773             case 'forward':
1774             case 'forward_as_attachment':
1775                 // check if we are allowed to set the $Forwarded flag (RFC 4550 paragraph 2.8)
1776                 if (in_array('$forwarded',$aMailbox['PERMANENTFLAGS'], true) ||
1777                     in_array('\\*',$aMailbox['PERMANENTFLAGS'])) {
1778
1779                     // when forwarding as an attachment from the message
1780                     // list, passed_id is not used, need to get UID(s)
1781                     // from the query string
1782                     //
1783                     if (empty($passed_id) && !empty($fwduid))
1784                         $ids = explode('_', $fwduid);
1785                     else
1786                         $ids = array($passed_id);
1787
1788                     $aUpdatedMsgs = sqimap_toggle_flag($imap_stream, $ids, '$Forwarded', true, false);
1789
1790                     foreach ($ids as $id) {
1791                         if (isset($aUpdatedMsgs[$id]['FLAGS'])) {
1792                             if (isset($aMailbox['MSG_HEADERS'][$id])) {
1793                                 $aMailbox['MSG_HEADERS'][$id]['FLAGS'] = $aMsg['FLAGS'];
1794                             }
1795                         }
1796                     }
1797                 }
1798                 break;
1799             }
1800
1801             /**
1802              * Write mailbox with updated seen flag information back to cache.
1803              */
1804             if(isset($aUpdatedMsgs[$passed_id])) {
1805                 $mailbox_cache[$iAccount.'_'.$aMailbox['NAME']] = $aMailbox;
1806                 sqsession_register($mailbox_cache,'mailbox_cache');
1807             }
1808
1809         }
1810
1811
1812         // move to sent folder
1813         //
1814         $move_to_sent = getPref($data_dir,$username,'move_to_sent');
1815         if (isset($default_move_to_sent) && ($default_move_to_sent != 0)) {
1816             $svr_allow_sent = true;
1817         } else {
1818             $svr_allow_sent = false;
1819         }
1820
1821         if (isset($sent_folder) && (($sent_folder != '') || ($sent_folder != 'none'))
1822                 && sqimap_mailbox_exists( $imap_stream, $sent_folder)) {
1823             $fld_sent = true;
1824         } else {
1825             $fld_sent = false;
1826         }
1827
1828         if ((isset($move_to_sent) && ($move_to_sent != 0)) || (!isset($move_to_sent))) {
1829             $lcl_allow_sent = true;
1830         } else {
1831             $lcl_allow_sent = false;
1832         }
1833
1834         if (($fld_sent && $svr_allow_sent && !$lcl_allow_sent) || ($fld_sent && $lcl_allow_sent)) {
1835             if ($action == 'reply' || $action == 'reply_all') {
1836                 $save_reply_with_orig=getPref($data_dir,$username,'save_reply_with_orig');
1837                 if ($save_reply_with_orig) {
1838                     $sent_folder = $mailbox;
1839                 }
1840             }
1841             require_once(SM_PATH . 'class/deliver/Deliver_IMAP.class.php');
1842             $imap_deliver = new Deliver_IMAP();
1843             $imap_deliver->mail($composeMessage, $imap_stream, $reply_id, $reply_ent_id, $imap_stream, $sent_folder);
1844             unset ($imap_deliver);
1845         }
1846
1847
1848         // final cleanup
1849         //
1850         $composeMessage->purgeAttachments();
1851         sqimap_logout($imap_stream);
1852
1853     }
1854     return $success;
1855 }