src/compose.php

   1 <?php
   2    /**
   3     ** compose.php
   4     **
   5     **  Copyright (c) 1999-2000 The SquirrelMail development team
   6     **  Licensed under the GNU GPL. For full terms see the file COPYING.
   7     **
   8     ** This code sends a mail.
   9     **
  10     ** There are 3 modes of operation:
  11     **  - Start new mail
  12     **  - Add an attachment
  13     **  - Send mail
  14     **
  15     ** $Id$
  16     **/
  17
  18    session_start();
  19
  20    if (!isset($strings_php))
  21       include("../functions/strings.php");
  22    if (!isset($config_php))
  23       include("../config/config.php");
  24    if (!isset($page_header_php))
  25       include("../functions/page_header.php");
  26    if (!isset($imap_php))
  27       include("../functions/imap.php");
  28    if (!isset($date_php))
  29       include("../functions/date.php");
  30    if (!isset($mime_php))
  31       include("../functions/mime.php");
  32    if (!isset($smtp_php))
  33       include("../functions/smtp.php");
  34    if (!isset($display_messages_php))
  35       include("../functions/display_messages.php");
  36    if (!isset($auth_php))
  37       include ("../functions/auth.php");
  38    if (!isset($plugin_php))
  39       include ("../functions/plugin.php");
  40
  41    include("../src/load_prefs.php");
  42
  43    // This function is used when not sending or adding attachments
  44    function newMail () {
  45       global $forward_id, $imapConnection, $msg, $ent_num, $body_ary, $body,
  46          $reply_id, $send_to, $send_to_cc, $mailbox, $send_to_bcc, $editor_size;
  47
  48       $send_to = sqStripSlashes(decodeHeader($send_to));
  49       $send_to_cc = sqStripSlashes(decodeHeader($send_to_cc));
  50       $send_to_bcc = sqStripSlashes(decodeHeader($send_to_bcc));
  51
  52       if ($forward_id)
  53          $id = $forward_id;
  54       elseif ($reply_id)
  55          $id = $reply_id;
  56
  57
  58       if (isset($id)) {
  59          sqimap_mailbox_select($imapConnection, $mailbox);
  60          $message = sqimap_get_message($imapConnection, $id, $mailbox);
  61          $orig_header = $message->header;
  62          if ($ent_num)
  63             $message = getEntity($message, $ent_num);
  64
  65          if ($message->header->type0 == "text" || $message->header->type1 == "message") {
  66             if ($ent_num)
  67                $body = decodeBody(mime_fetch_body($imapConnection, $id, $ent_num), $message->header->encoding);
  68             else
  69                $body = decodeBody(mime_fetch_body($imapConnection, $id, 1), $message->header->encoding);
  70          } else {
  71             $body = "";
  72          }
  73
  74          if ($message->header->type1 == "html")
  75             $body = strip_tags($body);
  76
  77          sqUnWordWrap($body);
  78          $body_ary = explode("\n", $body);
  79          $i = count($body_ary) - 1;
  80          while (isset($body_ary[$i]) && ereg("^[>\s]*$", $body_ary[$i])) {
  81             unset($body_ary[$i]);
  82             $i --;
  83          }
  84          $body = "";
  85          for ($i=0; $i < count($body_ary); $i++) {
  86             if (! $forward_id)
  87             {
  88                 if (ereg('^[\s>]+', $body_ary[$i]))
  89                 {
  90                     $body_ary[$i] = '>' . $body_ary[$i];
  91                 }
  92                 else
  93                 {
  94                     $body_ary[$i] = '> ' . $body_ary[$i];
  95                 }
  96             }
  97             sqWordWrap($body_ary[$i], $editor_size - 1);
  98             $body .= $body_ary[$i] . "\n";
  99             $body_ary[$i] = '';
 100          }
 101          if ($forward_id)
 102          {
 103              $bodyTop =  "-------- " . _("Original Message") . " --------\n";
 104              $bodyTop .= _("Subject") . ": " . $orig_header->subject . "\n";
 105              $bodyTop .= _("From") . ": " . $orig_header->from . "\n";
 106              $bodyTop .= _("To") . ": " . $orig_header->to[0] . "\n";
 107              if (count($orig_header->to) > 1) {
 108                  for ($x=1; $x < count($orig_header->to); $x++) {
 109                      $bodyTop .= "         " . $orig_header->to[$x] . "\n";
 110                  }
 111              }
 112              $bodyTop .= "\n";
 113              $body = $bodyTop . $body;
 114          }
 115
 116          $body = ereg_replace('\\\\', '\\\\', $body);
 117
 118          return;
 119       }
 120
 121       if (!$send_to) {
 122          $send_to = sqimap_find_email($send_to);
 123       }
 124
 125       /** This formats a CC string if they hit "reply all" **/
 126       if ($send_to_cc != "") {
 127          $send_to_cc = ereg_replace( '"[^"]*"', "", $send_to_cc);
 128          $send_to_cc = ereg_replace(";", ",", $send_to_cc);
 129          $sendcc = explode(",", $send_to_cc);
 130          $send_to_cc = "";
 131
 132          for ($i = 0; $i < count($sendcc); $i++) {
 133             $sendcc[$i] = trim($sendcc[$i]);
 134             if ($sendcc[$i] == "")
 135                continue;
 136
 137             $sendcc[$i] = sqimap_find_email($sendcc[$i]);
 138             $whofrom = sqimap_find_displayable_name($msg["HEADER"]["FROM"]);
 139             $whoreplyto = sqimap_find_email($msg["HEADER"]["REPLYTO"]);
 140
 141             if ((strtolower(trim($sendcc[$i])) != strtolower(trim($whofrom))) &&
 142                 (strtolower(trim($sendcc[$i])) != strtolower(trim($whoreplyto))) &&
 143                 (trim($sendcc[$i]) != "")) {
 144                $send_to_cc .= trim($sendcc[$i]) . ", ";
 145             }
 146          }
 147          $send_to_cc = trim($send_to_cc);
 148          if (substr($send_to_cc, -1) == ",") {
 149             $send_to_cc = substr($send_to_cc, 0, strlen($send_to_cc) - 1);
 150          }
 151       }
 152    } // function newMail()
 153
 154    function getAttachments($message) {
 155       global $mailbox, $attachments, $attachment_dir, $imapConnection,
 156              $ent_num, $forward_id;
 157
 158       if (!$message) {
 159            sqimap_mailbox_select($imapConnection, $mailbox);
 160            $message = sqimap_get_message($imapConnection, $forward_id, $mailbox); }
 161
 162       if (!$message->entities) {
 163       if ($message->header->entity_id != $ent_num) {
 164       $filename = decodeHeader($message->header->filename);
 165
 166       if ($filename == "")
 167               $filename = "untitled-".$message->header->entity_id;
 168
 169       $localfilename = md5($filename.", $REMOTE_IP, REMOTE_PORT, $UNIQUE_ID, extra-stuff here");
 170
 171         // Write File Info
 172         $fp = fopen ($attachment_dir.$localfilename.".info", "w");
 173         fputs ($fp, strtolower($message->header->type0)."/".strtolower($message->header->type1)."\n".$filename."\n");
 174         fclose ($fp);
 175
 176         // Write Attachment to file
 177         $fp = fopen ($attachment_dir.$localfilename, "w");
 178       fputs ($fp, decodeBody(mime_fetch_body($imapConnection, $forward_id, $message->header->entity_id), $message->header->encoding));
 179       fclose ($fp);
 180
 181       $attachments[$localfilename] = $filename;
 182
 183       }
 184       } else {
 185               for ($i = 0; $i < count($message->entities); $i++) {
 186               getAttachments($message->entities[$i]);
 187               }
 188       }
 189       return;
 190       }
 191
 192    function showInputForm () {
 193       global $send_to, $send_to_cc, $reply_subj, $forward_subj, $body,
 194          $passed_body, $color, $use_signature, $signature, $editor_size,
 195          $attachments, $subject, $newmail, $use_javascript_addr_book,
 196          $send_to_bcc, $reply_id, $mailbox, $from_htmladdr_search,
 197          $location_of_buttons;
 198
 199       $subject = sqStripSlashes(decodeHeader($subject));
 200       $reply_subj = decodeHeader($reply_subj);
 201       $forward_subj = decodeHeader($forward_subj);
 202       $body = sqStripSlashes($body);
 203
 204       if ($use_javascript_addr_book) {
 205          echo "\n<SCRIPT LANGUAGE=JavaScript><!--\n";
 206          echo "function open_abook() { \n";
 207          echo "  var nwin = window.open(\"addrbook_popup.php\",\"abookpopup\",";
 208          echo "\"width=670,height=300,resizable=yes,scrollbars=yes\");\n";
 209          echo "  if((!nwin.opener) && (document.windows != null))\n";
 210          echo "    nwin.opener = document.windows;\n";
 211          echo "}\n";
 212          echo "// --></SCRIPT>\n\n";
 213       }
 214
 215       echo "\n<FORM name=compose action=\"compose.php\" METHOD=POST ENCTYPE=\"multipart/form-data\"";
 216       do_hook("compose_form");
 217           echo ">\n";
 218       if ($reply_id) {
 219          echo "<input type=hidden name=reply_id value=$reply_id>\n";
 220       }
 221       printf("<INPUT TYPE=hidden NAME=mailbox VALUE=\"%s\">\n", htmlspecialchars($mailbox));
 222       echo "<TABLE WIDTH=\"100%\" ALIGN=center CELLSPACING=0 BORDER=0>\n";
 223
 224       if ($location_of_buttons == 'top') showComposeButtonRow();
 225
 226       echo "   <TR>\n";
 227       echo "      <TD BGCOLOR=\"$color[4]\" ALIGN=RIGHT>\n";
 228       echo _("To:");
 229       echo "      </TD><TD BGCOLOR=\"$color[4]\">\n";
 230       printf("         <INPUT TYPE=text NAME=\"send_to\" VALUE=\"%s\" SIZE=60><BR>\n",
 231              htmlspecialchars($send_to));
 232       echo "      </TD>\n";
 233       echo "   </TR>\n";
 234       echo "   <TR>\n";
 235       echo "      <TD BGCOLOR=\"$color[4]\" ALIGN=RIGHT>\n";
 236       echo _("CC:");
 237       echo "      </TD><TD BGCOLOR=\"$color[4]\" ALIGN=LEFT>\n";
 238       printf("         <INPUT TYPE=text NAME=\"send_to_cc\" SIZE=60 VALUE=\"%s\"><BR>\n",
 239              htmlspecialchars($send_to_cc));
 240       echo "      </TD>\n";
 241       echo "   </TR>\n";
 242       echo "   <TR>\n";
 243       echo "      <TD BGCOLOR=\"$color[4]\" ALIGN=RIGHT>\n";
 244       echo _("BCC:");
 245       echo "      </TD><TD BGCOLOR=\"$color[4]\" ALIGN=LEFT>\n";
 246       printf("         <INPUT TYPE=text NAME=\"send_to_bcc\" VALUE=\"%s\" SIZE=60><BR>\n",
 247              htmlspecialchars($send_to_bcc));
 248       echo "</TD></TR>\n";
 249
 250       echo "   <TR>\n";
 251       echo "      <TD BGCOLOR=\"$color[4]\" ALIGN=RIGHT>\n";
 252       echo _("Subject:");
 253       echo "      </TD><TD BGCOLOR=\"$color[4]\" ALIGN=LEFT>\n";
 254       if ($reply_subj) {
 255          $reply_subj = str_replace("\"", "'", $reply_subj);
 256          $reply_subj = sqStripSlashes($reply_subj);
 257          $reply_subj = trim($reply_subj);
 258          if (substr(strtolower($reply_subj), 0, 3) != "re:")
 259             $reply_subj = "Re: $reply_subj";
 260          printf("         <INPUT TYPE=text NAME=subject SIZE=60 VALUE=\"%s\">",
 261                 htmlspecialchars($reply_subj));
 262       } else if ($forward_subj) {
 263          $forward_subj = str_replace("\"", "'", $forward_subj);
 264          $forward_subj = sqStripSlashes($forward_subj);
 265          $forward_subj = trim($forward_subj);
 266          if ((substr(strtolower($forward_subj), 0, 4) != "fwd:") &&
 267              (substr(strtolower($forward_subj), 0, 5) != "[fwd:") &&
 268              (substr(strtolower($forward_subj), 0, 6) != "[ fwd:"))
 269             $forward_subj = "[Fwd: $forward_subj]";
 270          printf("         <INPUT TYPE=text NAME=subject SIZE=60 VALUE=\"%s\">",
 271                 htmlspecialchars($forward_subj));
 272       } else {
 273           printf("         <INPUT TYPE=text NAME=subject SIZE=60 VALUE=\"%s\">",
 274                 htmlspecialchars($subject));
 275       }
 276       echo "</td></tr>\n\n";
 277
 278       if ($location_of_buttons == 'between') showComposeButtonRow();
 279
 280       echo "   <TR>\n";
 281       echo "      <TD BGCOLOR=\"$color[4]\" COLSPAN=2>\n";
 282       echo "         &nbsp;&nbsp;<TEXTAREA NAME=body ROWS=20 COLS=\"$editor_size\" WRAP=HARD>";
 283       echo htmlspecialchars($body);
 284       if ($use_signature == true && $newmail == true && !isset($from_htmladdr_search)) {
 285          echo "\n\n-- \n" . htmlspecialchars($signature);
 286       }
 287       echo "</TEXTAREA><BR>\n";
 288       echo "      </TD>\n";
 289       echo "   </TR>\n";
 290
 291       if ($location_of_buttons == 'bottom')
 292          showComposeButtonRow();
 293       else {
 294          echo "   <TR><TD>&nbsp;</TD><TD ALIGN=LEFT><INPUT TYPE=SUBMIT NAME=send VALUE=\""._("Send")."\"></TD></TR>\n";
 295       }
 296
 297       // This code is for attachments
 298       echo "   <tr>\n";
 299       echo "     <TD BGCOLOR=\"$color[0]\" VALIGN=TOP ALIGN=RIGHT>\n";
 300       echo "      <SMALL><BR></SMALL>"._("Attach:");
 301       echo "      </td><td ALIGN=left BGCOLOR=\"$color[0]\">\n";
 302       //      echo "      <INPUT TYPE=\"hidden\" name=\"MAX_FILE_SIZE\"\n";
 303       //      echo "      value=\"10000\">\n";
 304       echo "      <INPUT NAME=\"attachfile\" SIZE=48 TYPE=\"file\">\n";
 305       echo "      &nbsp;&nbsp;<input type=\"submit\" name=\"attach\"";
 306       echo " value=\"" . _("Add") ."\">\n";
 307       echo "     </td>\n";
 308       echo "   </tr>\n";
 309       if (isset($attachments) && count($attachments)>0) {
 310          echo "<tr><td bgcolor=\"$color[0]\" align=right>\n";
 311          echo "&nbsp;";
 312          echo "</td><td align=left bgcolor=\"$color[0]\">";
 313          while (list($localname, $remotename) = each($attachments)) {
 314             echo "<input type=\"checkbox\" name=\"delete[]\" value=\"$localname\">\n";
 315             echo "$remotename <input type=\"hidden\" name=\"attachments[$localname]\" value=\"$remotename\"><br>\n";
 316          }
 317
 318          echo "<input type=\"submit\" name=\"do_delete\" value=\""._("Delete selected attachments")."\">\n";
 319          echo "</td></tr>";
 320       }
 321       // End of attachment code
 322
 323       echo "</TABLE>\n";
 324       echo "</FORM>";
 325       do_hook("compose_bottom");
 326    }
 327
 328    function showComposeButtonRow() {
 329       global $use_javascript_addr_book;
 330       echo "   <TR><td>\n   </td><td>\n";
 331       if ($use_javascript_addr_book) {
 332          echo "      <SCRIPT LANGUAGE=JavaScript><!--\n document.write(\"";
 333          echo "         <input type=button value=\\\""._("Addresses")."\\\" onclick='javascript:open_abook();'>\");";
 334          echo "         // --></SCRIPT><NOSCRIPT>\n";
 335          echo "         <input type=submit name=\"html_addr_search\" value=\""._("Addresses")."\">";
 336          echo "      </NOSCRIPT>\n";
 337       } else {
 338          echo "      <input type=submit name=\"html_addr_search\" value=\""._("Addresses")."\">";
 339       }
 340       echo "\n    <INPUT TYPE=SUBMIT NAME=send VALUE=\"". _("Send") . "\">\n";
 341
 342       do_hook("compose_button_row");
 343
 344       echo "   </TD>\n";
 345       echo "   </TR>\n\n";
 346    }
 347
 348    function showSentForm () {
 349       echo "<BR><BR><BR><CENTER><B>Message Sent!</B><BR><BR>";
 350       echo "You will be automatically forwarded.<BR>If not, <A HREF=\"right_main.php\">click here</A>";
 351       echo "</CENTER>";
 352    }
 353
 354    function checkInput ($show) {
 355       /** I implemented the $show variable because the error messages
 356           were getting sent before the page header.  So, I check once
 357           using $show=false, and then when i'm ready to display the
 358           error message, show=true **/
 359       global $body, $send_to, $subject, $color;
 360
 361       if ($send_to == "") {
 362          if ($show)
 363             plain_error_message(_("You have not filled in the \"To:\" field."), $color);
 364          return false;
 365       }
 366       return true;
 367    } // function checkInput()
 368
 369
 370    // True if FAILURE
 371    function saveAttachedFiles() {
 372       global $HTTP_POST_FILES, $attachment_dir, $attachments;
 373
 374       is_logged_in();
 375       $localfilename = GenerateRandomString(32, '', 7);
 376
 377       if (!@rename($HTTP_POST_FILES['attachfile']['tmp_name'], $attachment_dir.$localfilename)) {
 378          if (!@copy($HTTP_POST_FILES['attachfile']['tmp_name'], $attachment_dir.$localfilename)) {
 379             return true;
 380          }
 381       }
 382
 383       if (!isset($failed) || !$failed) {
 384          // Write information about the file
 385          $fp = fopen ($attachment_dir.$localfilename.".info", "w");
 386          fputs ($fp, $HTTP_POST_FILES['attachfile']['type']."\n".$HTTP_POST_FILES['attachfile']['name']."\n");
 387          fclose ($fp);
 388
 389          $attachments[$localfilename] = $HTTP_POST_FILES['attachfile']['name'];
 390       }
 391     }
 392
 393    if (!isset($mailbox) || $mailbox == "" || ($mailbox == "None"))
 394       $mailbox = "INBOX";
 395
 396    if(isset($send)) {
 397       if (isset($HTTP_POST_FILES['attachfile']) &&
 398           $HTTP_POST_FILES['attachfile']['tmp_name'] &&
 399           $HTTP_POST_FILES['attachfile']['tmp_name'] != 'none')
 400           $AttachFailure = saveAttachedFiles();
 401       if (checkInput(false) && ! isset($AttachFailure)) {
 402          $urlMailbox = urlencode ($mailbox);
 403          if (! isset($reply_id))
 404              $reply_id = 0;
 405          sendMessage($send_to, $send_to_cc, $send_to_bcc, $subject, $body, $reply_id);
 406          header ("Location: right_main.php?mailbox=$urlMailbox&sort=$sort&startMessage=1");
 407       } else {
 408          //$imapConnection = sqimap_login($username, $key, $imapServerAddress, $imapPort, 0);
 409          displayPageHeader($color, $mailbox);
 410
 411          if ($AttachFailure)
 412              plain_error_message(_("Could not move/copy file. File not attached"), $color);
 413
 414          checkInput(true);
 415
 416          showInputForm();
 417          //sqimap_logout($imapConnection);
 418       }
 419    } else if (isset($html_addr_search_done)) {
 420       is_logged_in();
 421       displayPageHeader($color, $mailbox);
 422
 423       $send_to = sqStripSlashes($send_to);
 424       $send_to_cc = sqStripSlashes($send_to_cc);
 425       $send_to_bcc = sqStripSlashes($send_to_bcc);
 426
 427       for ($i=0; $i < count($send_to_search); $i++) {
 428          if ($send_to)
 429             $send_to .= ", ";
 430          $send_to .= $send_to_search[$i];
 431       }
 432
 433       for ($i=0; $i < count($send_to_cc_search); $i++) {
 434          if ($send_to_cc)
 435             $send_to_cc .= ", ";
 436          $send_to_cc .= $send_to_cc_search[$i];
 437       }
 438
 439       showInputForm();
 440    } else if (isset($html_addr_search)) {
 441       // I am using an include so as to elminiate an extra unnecessary click.  If you
 442       // can think of a better way, please implement it.
 443       include ("./addrbook_search_html.php");
 444    } else if (isset($attach)) {
 445       if (saveAttachedFiles())
 446             plain_error_message(_("Could not move/copy file. File not attached"), $color);
 447       displayPageHeader($color, $mailbox);
 448       showInputForm();
 449    } else if (isset($do_delete)) {
 450       is_logged_in();
 451       displayPageHeader($color, $mailbox);
 452
 453       while (list($lkey, $localname) = each($delete)) {
 454          unset ($attachments[$localname]);
 455          unlink ($attachment_dir.$localname);
 456          unlink ($attachment_dir.$localname.".info");
 457       }
 458
 459       showInputForm();
 460         } else if (isset($smtpErrors)) {
 461       $imapConnection = sqimap_login($username, $key, $imapServerAddress, $imapPort, 0);
 462       displayPageHeader($color, $mailbox);
 463
 464       $newmail = true;
 465       if ($forward_id && $ent_num)  getAttachments(0);
 466
 467       newMail();
 468       showInputForm();
 469       sqimap_logout($imapConnection);
 470    } else {
 471       $imapConnection = sqimap_login($username, $key, $imapServerAddress, $imapPort, 0);
 472       displayPageHeader($color, $mailbox);
 473
 474       $newmail = true;
 475
 476       if (isset($forward_id) && isset($ent_num))  getAttachments(0);
 477
 478       newMail();
 479       showInputForm();
 480       sqimap_logout($imapConnection);
 481    }
 482 ?>
 483
 484