src/compose.php

   1 <?php
   2
   3 /**
   4  * compose.php
   5  *
   6  * Copyright (c) 1999-2002 The SquirrelMail Project Team
   7  * Licensed under the GNU GPL. For full terms see the file COPYING.
   8  *
   9  * This code sends a mail.
  10  *
  11  * There are 4 modes of operation:
  12  *    - Start new mail
  13  *    - Add an attachment
  14  *    - Send mail
  15  *    - Save As Draft
  16  *
  17  * $Id$
  18  */
  19
  20 require_once('../src/validate.php');
  21 require_once('../functions/imap.php');
  22 require_once('../functions/date.php');
  23 require_once('../functions/mime.php');
  24 require_once('../functions/smtp.php');
  25 require_once('../functions/plugin.php');
  26 require_once('../functions/display_messages.php');
  27 /* --------------------- Specific Functions ------------------------------ */
  28
  29 function replyAllString($header) {
  30    global $include_self_reply_all, $username, $data_dir;
  31    $excl_arr = array();
  32    /**
  33     * 1) Remove the addresses we'll be sending the message 'to'
  34     */
  35    $url_replytoall_avoid_addrs = '';
  36    if (isset($header->replyto)) {
  37       $excl_ar = $header->getAddr_a('replyto');
  38    }
  39    /**
  40     * 2) Remove our identities from the CC list (they still can be in the
  41     * TO list) only if $include_self_reply_all is turned off
  42     */
  43    if (!$include_self_reply_all) {
  44        $email_address = trim(getPref($data_dir, $username, 'email_address'));
  45        $excl_ar[$email_address] = '';
  46
  47        $idents = getPref($data_dir, $username, 'identities');
  48        if ($idents != '' && $idents > 1) {
  49           for ($i = 1; $i < $idents; $i ++) {
  50              $cur_email_address = getPref($data_dir, $username,
  51                                          'email_address' . $i);
  52              $cur_email_address = strtolower($cur_email_address);
  53              $excl_ar[$cur_email_address] = '';
  54          }
  55        }
  56    }
  57
  58    /**
  59     * 3) get the addresses.
  60     */
  61    $url_replytoall_ar = $header->getAddr_a(array('to','cc'), $excl_ar);
  62
  63    /**
  64     * 4) generate the string.
  65     */
  66    $url_replytoallcc = '';
  67    foreach( $url_replytoall_ar as $email => $personal) {
  68       if ($personal) {
  69          $url_replytoallcc .= ", \"$personal\" <$email>";
  70       } else {
  71          $url_replytoallcc .= ', '. $email;
  72       }
  73    }
  74    $url_replytoallcc = substr($url_replytoallcc,2);
  75    return $url_replytoallcc;
  76 }
  77
  78 function getforwardHeader($orig_header) {
  79     global $editor_size;
  80
  81    $display = array(
  82                      _("Subject") => strlen(_("Subject")),
  83                      _("From")    => strlen(_("From")),
  84                      _("Date")    => strlen(_("Date")),
  85                      _("To")      => strlen(_("To")),
  86                      _("Cc")      => strlen(_("Cc"))
  87                     );
  88    $maxsize = max($display);
  89    $indent = str_pad('',$maxsize+2);
  90    foreach($display as $key => $val) {
  91       $display[$key] = $key .': '. str_pad('', $maxsize - $val);
  92    }
  93    $bodyTop =  str_pad(' '._("Original Message").' ',$editor_size -2,'-',STR_PAD_BOTH);
  94    $bodyTop .=  "\n". $display[_("Subject")] . decodeHeader($orig_header->subject) . "\n" .
  95         $display[_("From")] . decodeHeader($orig_header->getAddr_s('from',"\n$indent")) . "\n" .
  96         $display[_("Date")] . getLongDateString( $orig_header->date ). "\n" .
  97         $display[_("To")] . decodeHeader($orig_header->getAddr_s('to',"\n$indent")) ."\n";
  98   if ($orig_header->cc != array() && $orig_header->cc !='') {
  99      $bodyTop .= $display[_("Cc")] . decodeHeader($orig_header->getAddr_s('cc',"\n$indent")) . "\n";
 100   }
 101   $bodyTop .= str_pad('', $editor_size -2 , '-');
 102   $bodyTop .= "\n";
 103   return $bodyTop;
 104 }
 105 /* ----------------------------------------------------------------------- */
 106
 107 /*
 108  * If the session is expired during a post this restores the compose session
 109  * vars.
 110  */
 111 //$session_expired = false;
 112 if (session_is_registered('session_expired_post')) {
 113    global $session_expired_post, $session_expired;
 114    /*
 115     * extra check for username so we don't display previous post data from
 116     * another user during this session.
 117     */
 118    if ($session_expired_post['username'] != $username) {
 119       session_unregister('session_expired_post');
 120       session_unregister('session_expired');
 121    } else {
 122       foreach ($session_expired_post as $postvar => $val) {
 123          if (isset($val)) {
 124             $$postvar = $val;
 125          } else {
 126             $$postvar = '';
 127          }
 128       }
 129       if (isset($send)) {
 130          unset($send);
 131       }
 132       $session_expired = true;
 133    }
 134    session_unregister('session_expired_post');
 135    session_unregister('session_expired');
 136    if (!isset($mailbox)) {
 137       $mailbox = '';
 138    }
 139    if ($compose_new_win == '1') {
 140       compose_Header($color, $mailbox);
 141    } else {
 142       displayPageHeader($color, $mailbox);
 143    }
 144    showInputForm($session, false);
 145    exit();
 146 }
 147
 148 if (!isset($attachments)) {
 149     $attachments = array();
 150     session_register('attachments');
 151 }
 152
 153 if (!isset($composesession)) {
 154     $composesession = 0;
 155     session_register('composesession');
 156 }
 157
 158 if (!isset($session) || (isset($newmessage) && $newmessage)) {
 159     $session = "$composesession" +1;
 160     $composesession = $session;
 161 }
 162
 163 if (!isset($mailbox) || $mailbox == '' || ($mailbox == 'None')) {
 164     $mailbox = 'INBOX';
 165 }
 166
 167 if (isset($draft)) {
 168     include_once ('../src/draft_actions.php');
 169     if (! isset($passed_id)) {
 170          $passed_id = 0;
 171     }
 172     if (! isset($MDN)) {
 173         $MDN = 'False';
 174     }
 175     if (! isset($mailprio)) {
 176         $mailprio = '';
 177     }
 178     if (!saveMessageAsDraft($send_to, $send_to_cc, $send_to_bcc, $subject, $body, $passed_id, $mailprio, $session)) {
 179         showInputForm($session);
 180         exit();
 181     } else {
 182         $draft_message = _("Draft Email Saved");
 183         /* If this is a resumed draft, then delete the original */
 184         if(isset($delete_draft)) {
 185             Header("Location: delete_message.php?mailbox=" . urlencode($draft_folder) .
 186                    "&message=$delete_draft&sort=$sort&startMessage=1&saved_draft=yes");
 187             exit();
 188         }
 189         else {
 190             if ($compose_new_win == '1') {
 191                 Header("Location: compose.php?saved_draft=yes&session=$composesession");
 192             exit();
 193             }
 194             else {
 195             Header("Location: right_main.php?mailbox=$draft_folder&sort=$sort".
 196                    "&startMessage=1&note=".urlencode($draft_message));
 197             exit();
 198             }
 199         }
 200     }
 201 }
 202
 203 if (isset($send)) {
 204     if (isset($HTTP_POST_FILES['attachfile']) &&
 205         $HTTP_POST_FILES['attachfile']['tmp_name'] &&
 206         $HTTP_POST_FILES['attachfile']['tmp_name'] != 'none') {
 207         $AttachFailure = saveAttachedFiles($session);
 208     }
 209     if (checkInput(false) && !isset($AttachFailure)) {
 210         $urlMailbox = urlencode (trim($mailbox));
 211         if (! isset($passed_id)) {
 212             $passed_id = 0;
 213         }
 214         /*
 215          * Set $default_charset to correspond with the user's selection
 216          * of language interface.
 217          */
 218         set_my_charset();
 219
 220         /*
 221          * This is to change all newlines to \n
 222          * We'll change them to \r\n later (in the sendMessage function)
 223          */
 224         $body = str_replace("\r\n", "\n", $body);
 225         $body = str_replace("\r", "\n", $body);
 226
 227         /*
 228          * Rewrap $body so that no line is bigger than $editor_size
 229          * This should only really kick in the sqWordWrap function
 230          * if the browser doesn't support "VIRTUAL" as the wrap type.
 231          */
 232         $body = explode("\n", $body);
 233         $newBody = '';
 234         foreach ($body as $line) {
 235             if( $line <> '-- ' ) {
 236                $line = rtrim($line);
 237             }
 238             if (strlen($line) <= $editor_size + 1) {
 239                 $newBody .= $line . "\n";
 240             } else {
 241                 sqWordWrap($line, $editor_size);
 242                 $newBody .= $line . "\n";
 243             }
 244         }
 245         $body = $newBody;
 246
 247         do_hook('compose_send');
 248
 249         $MDN = False;  // we are not sending a mdn response
 250         if (! isset($mailprio)) {
 251             $Result = sendMessage($send_to, $send_to_cc, $send_to_bcc,
 252                                   $subject, $body, $passed_id, $MDN, '', $session);
 253         } else {
 254             $Result = sendMessage($send_to, $send_to_cc, $send_to_bcc,
 255                                   $subject, $body, $passed_id, $MDN, $mailprio, $session);
 256         }
 257         if (! $Result) {
 258             showInputForm($session);
 259             exit();
 260         }
 261         if ( isset($delete_draft)) {
 262             Header("Location: delete_message.php?mailbox=" . urlencode( $draft_folder ).
 263                    "&message=$delete_draft&sort=$sort&startMessage=1&mail_sent=yes");
 264             exit();
 265         }
 266         if ($compose_new_win == '1') {
 267             Header("Location: compose.php?mail_sent=yes");
 268         }
 269         else {
 270             Header("Location: right_main.php?mailbox=$urlMailbox&sort=$sort".
 271                    "&startMessage=1");
 272         }
 273     } else {
 274         /*
 275          *$imapConnection = sqimap_login($username, $key, $imapServerAddress,
 276          *                               $imapPort, 0);
 277          */
 278         if ($compose_new_win == '1') {
 279             compose_Header($color, $mailbox);
 280         }
 281         else {
 282             displayPageHeader($color, $mailbox);
 283         }
 284         if (isset($AttachFailure)) {
 285              plain_error_message(_("Could not move/copy file. File not attached"),
 286                                  $color);
 287         }
 288         checkInput(true);
 289         showInputForm($session);
 290         /* sqimap_logout($imapConnection); */
 291     }
 292 } elseif (isset($html_addr_search_done)) {
 293         if ($compose_new_win == '1') {
 294             compose_Header($color, $mailbox);
 295         }
 296         else {
 297             displayPageHeader($color, $mailbox);
 298         }
 299
 300     if (isset($send_to_search) && is_array($send_to_search)) {
 301         foreach ($send_to_search as $k => $v) {
 302             if (substr($k, 0, 1) == 'T') {
 303                 if ($send_to) {
 304                     $send_to .= ', ';
 305                 }
 306                 $send_to .= $v;
 307             }
 308             elseif (substr($k, 0, 1) == 'C') {
 309                 if ($send_to_cc) {
 310                     $send_to_cc .= ', ';
 311                 }
 312                 $send_to_cc .= $v;
 313             }
 314             elseif (substr($k, 0, 1) == 'B') {
 315                 if ($send_to_bcc) {
 316                     $send_to_bcc .= ', ';
 317                 }
 318                 $send_to_bcc .= $v;
 319             }
 320         }
 321     }
 322     showInputForm($session);
 323 } elseif (isset($html_addr_search)) {
 324     if (isset($HTTP_POST_FILES['attachfile']) &&
 325         $HTTP_POST_FILES['attachfile']['tmp_name'] &&
 326         $HTTP_POST_FILES['attachfile']['tmp_name'] != 'none') {
 327         if (saveAttachedFiles($session)) {
 328             plain_error_message(_("Could not move/copy file. File not attached"), $color);
 329         }
 330     }
 331     /*
 332      * I am using an include so as to elminiate an extra unnecessary
 333      * click.  If you can think of a better way, please implement it.
 334      */
 335     include_once('./addrbook_search_html.php');
 336 } elseif (isset($attach)) {
 337     if (saveAttachedFiles($session)) {
 338         plain_error_message(_("Could not move/copy file. File not attached"), $color);
 339     }
 340         if ($compose_new_win == '1') {
 341             compose_Header($color, $mailbox);
 342         }
 343         else {
 344             displayPageHeader($color, $mailbox);
 345         }
 346     showInputForm($session);
 347 }
 348 elseif (isset($sigappend)) {
 349     $idents = getPref($data_dir, $username, 'identities', 0);
 350     if ($idents > 1) {
 351        if ($identity == 'default') {
 352           $no = 'g';
 353        } else {
 354           $no = $identity;
 355        }
 356        $signature = getSig($data_dir, $username, $no);
 357     }
 358     $body .= "\n\n".($prefix_sig==true? "-- \n":'').$signature;
 359     if ($compose_new_win == '1') {
 360          compose_Header($color, $mailbox);
 361     } else {
 362         displayPageHeader($color, $mailbox);
 363     }
 364     showInputForm($session);
 365 } elseif (isset($do_delete)) {
 366         if ($compose_new_win == '1') {
 367             compose_Header($color, $mailbox);
 368         }
 369         else {
 370             displayPageHeader($color, $mailbox);
 371         }
 372
 373     $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
 374     if (isset($delete) && is_array($delete)) {
 375         foreach($delete as $index) {
 376             $attached_file = $hashed_attachment_dir . '/'
 377                            . $attachments[$index]['localfilename'];
 378             unlink ($attached_file);
 379             unset ($attachments[$index]);
 380         }
 381         setPref($data_dir, $username, 'attachments', serialize($attachments));
 382     }
 383
 384     showInputForm($session);
 385 } else {
 386     /*
 387      * This handles the default case as well as the error case
 388      * (they had the same code) --> if (isset($smtpErrors))
 389      */
 390
 391     if ($compose_new_win == '1') {
 392        compose_Header($color, $mailbox);
 393     } else {
 394        displayPageHeader($color, $mailbox);
 395     }
 396
 397     $newmail = true;
 398
 399     if (!isset($passed_ent_id)) $passed_ent_id = '';
 400     if (!isset($passed_id)) $passed_id = '';
 401     if (!isset($mailbox)) $mailbox = '';
 402     if (!isset($action)) $action = '';
 403
 404     $values = newMail($mailbox,$passed_id,$passed_ent_id, $action, $session);
 405
 406     /* in case the origin is not read_body.php */
 407     if (isset($send_to)) {
 408        $values['send_to'] = $send_to;
 409     }
 410     if (isset($send_to_cc)) {
 411        $values['send_to_cc'] = $send_to_cc;
 412     }
 413     if (isset($send_to_bcc)) {
 414        $values['send_to_bcc'] = $send_to_bcc;
 415     }
 416     showInputForm($session, $values);
 417 }
 418
 419 exit();
 420
 421 /**************** Only function definitions go below *************/
 422
 423
 424 /* This function is used when not sending or adding attachments */
 425 function newMail ($mailbox='', $passed_id='', $passed_ent_id='', $action='', $session='') {
 426     global $editor_size, $default_use_priority,
 427            $use_signature, $composesession, $data_dir, $username,
 428            $username, $key, $imapServerAddress, $imapPort;
 429
 430     $send_to = $send_to_cc = $send_to_bcc = $subject = $body = $identity = '';
 431     $mailprio = 3;
 432
 433     if ($passed_id) {
 434         $imapConnection = sqimap_login($username, $key, $imapServerAddress,
 435                           $imapPort, 0);
 436
 437         sqimap_mailbox_select($imapConnection, $mailbox);
 438         $message = sqimap_get_message($imapConnection, $passed_id, $mailbox);
 439         $body = '';
 440         if ($passed_ent_id) {
 441            /* redefine the messsage in case of message/rfc822 */
 442            $message = $message->getEntity($passed_ent_id);
 443            /* message is an entity which contains the envelope and type0=message
 444             * and type1=rfc822. The actual entities are childs from
 445             * $message->entities[0]. That's where the encoding and is located
 446             */
 447
 448            $entities = $message->entities[0]->findDisplayEntity
 449                        (array(), $alt_order = array('text/plain'));
 450            if (!count($entities)) {
 451               $entities = $message->entities[0]->findDisplayEntity
 452                        (array(), $alt_order = array('text/plain','html/plain'));
 453            }
 454            $orig_header = $message->rfc822_header; /* here is the envelope located */
 455            /* redefine the message for picking up the attachments */
 456            $message = $message->entities[0];
 457
 458         } else {
 459            $entities = $message->findDisplayEntity (array(), $alt_order = array('text/plain'));
 460            if (!count($entities)) {
 461               $entities = $message->findDisplayEntity (array(), $alt_order = array('text/plain','html/plain'));
 462            }
 463            $orig_header = $message->rfc822_header;
 464         }
 465         $encoding = $message->header->encoding;
 466         $type0 = $message->type0;
 467         $type1 = $message->type1;
 468         foreach ($entities as $ent) {
 469            $unencoded_bodypart = mime_fetch_body($imapConnection, $passed_id, $ent);
 470            $body_part_entity = $message->getEntity($ent);
 471            $bodypart = decodeBody($unencoded_bodypart,
 472                                   $body_part_entity->header->encoding);
 473            if ($type1 == 'html') {
 474               $bodypart = strip_tags($bodypart);
 475            }
 476            $body .= $bodypart;
 477         }
 478         if ($default_use_priority) {
 479           $mailprio = substr($orig_header->priority,0,1);
 480           if (!$mailprio) {
 481              $mailprio = 3;
 482           }
 483         } else {
 484           $mailprio = '';
 485         }
 486         ClearAttachments($session);
 487
 488         $identity = '';
 489         $idents = getPref($data_dir, $username, 'identities');
 490         $from_o = $orig_header->from;
 491         if (is_object($from_o)) {
 492             $orig_from = $from_o->getAddress();
 493         } else {
 494             $orig_from = '';
 495         }
 496         if (!empty($idents) && $idents > 1) {
 497            for ($i = 1; $i < $idents; $i++) {
 498               $enc_from_name = '"'.
 499                               getPref($data_dir,
 500                                       $username,
 501                                       'full_name' . $i) .
 502                  '" <' . getPref($data_dir, $username,
 503                                  'email_address' . $i) . '>';
 504               if ($enc_from_name == $orig_from) {
 505                   $identity = $i;
 506                   break;
 507               }
 508            }
 509         }
 510
 511         switch ($action) {
 512         case ('draft'):
 513            $use_signature = FALSE;
 514            $send_to = $orig_header->getAddr_s('to');
 515            $send_to_cc = $orig_header->getAddr_s('cc');
 516            $send_to_bcc = $orig_header->getAddr_s('bcc');
 517            $subject = $orig_header->subject;
 518
 519            $body_ary = explode("\n", $body);
 520            $cnt = count($body_ary) ;
 521            $body = '';
 522            for ($i=0; $i < $cnt; $i++) {
 523               if (!ereg("^[>\\s]*$", $body_ary[$i])) {
 524                  sqWordWrap($body_ary[$i], $editor_size );
 525                  $body .= $body_ary[$i] . "\n";
 526               }
 527               unset($body_ary[$i]);
 528            }
 529            sqUnWordWrap($body);
 530            getAttachments($message, $session, $passed_id, $entities, $imapConnection);
 531            break;
 532         case ('edit_as_new'):
 533            $send_to = $orig_header->getAddr_s('to');
 534            $send_to_cc = $orig_header->getAddr_s('cc');
 535            $send_to_bcc = $orig_header->getAddr_s('bcc');
 536            $subject = $orig_header->subject;
 537            $mailprio = $orig_header->priority;
 538            $orig_from = '';
 539            getAttachments($message, $session, $passed_id, $entities, $imapConnection);
 540            sqUnWordWrap($body);
 541            break;
 542         case ('forward'):
 543            $send_to = '';
 544            $subject = $orig_header->subject;
 545            if ((substr(strtolower($subject), 0, 4) != 'fwd:') &&
 546               (substr(strtolower($subject), 0, 5) != '[fwd:') &&
 547               (substr(strtolower($subject), 0, 6) != '[ fwd:')) {
 548               $subject = '[Fwd: ' . $subject . ']';
 549            }
 550            $body = getforwardHeader($orig_header) . $body;
 551            sqUnWordWrap($body);
 552            getAttachments($message, $session, $passed_id, $entities, $imapConnection);
 553            break;
 554         case ('reply_all'):
 555            $send_to_cc = replyAllString($orig_header);
 556         case ('reply'):
 557            $send_to = $orig_header->reply_to;
 558            if (is_object($send_to)) {
 559               $send_to = $send_to->getAddr_s('reply_to');
 560            } else {
 561               $send_to = $orig_header->getAddr_s('from');
 562            }
 563            $subject = $orig_header->subject;
 564            $subject = str_replace('"', "'", $subject);
 565            $subject = trim($subject);
 566            if (substr(strtolower($subject), 0, 3) != 're:') {
 567               $subject = 'Re: ' . $subject;
 568            }
 569            /* this corrects some wrapping/quoting problems on replies */
 570            $rewrap_body = explode("\n", $body);
 571            $body = getReplyCitation($orig_header->from->personal);
 572            $cnt = count($rewrap_body);
 573            for ($i=0;$i<$cnt;$i++) {
 574               sqWordWrap($rewrap_body[$i], ($editor_size - 2));
 575               if (preg_match("/^(>+)/", $rewrap_body[$i], $matches)) {
 576                  $gt = $matches[1];
 577                  $body .= '>' . str_replace("\n", "\n$gt ", $rewrap_body[$i]) ."\n";
 578               } else {
 579                  $body .= '> ' . $rewrap_body[$i] . "\n";
 580               }
 581               unset($rewrap_body[$i]);
 582            }
 583            break;
 584         default:
 585            break;
 586         }
 587         sqimap_logout($imapConnection);
 588     }
 589     $ret = array(
 590             'send_to' => $send_to,
 591             'send_to_cc' => $send_to_cc,
 592             'send_to_bcc' => $send_to_bcc,
 593             'subject' => $subject,
 594             'mailprio' => $mailprio,
 595             'body' => $body,
 596             'identity' => $identity
 597             );
 598
 599     return ($ret);
 600 } /* function newMail() */
 601
 602
 603 function getAttachments($message, $session, $passed_id, $entities, $imapConnection) {
 604     global $attachments, $attachment_dir, $username, $data_dir;
 605
 606     $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
 607     if (!count($message->entities) ||
 608        ($message->type0 == 'message' && $message->type1 == 'rfc822')) {
 609         if ( !in_array($message->entity_id, $entities) && $message->entity_id) {
 610             if ($message->type0 == 'message' && $message->type1 == 'rfc822') {
 611                $filename = decodeHeader($message->rfc822_header->subject.'.eml');
 612                if ($filename == "") {
 613                   $filename = "untitled-".$message->entity_id.'.eml';
 614                }
 615             } else {
 616                $filename = decodeHeader($message->header->getParameter('filename'));
 617                if ($filename == "") {
 618                   $filename = "untitled-".$message->entity_id;
 619                }
 620             }
 621             $localfilename = GenerateRandomString(32, '', 7);
 622             $full_localfilename = "$hashed_attachment_dir/$localfilename";
 623             while (file_exists($full_localfilename)) {
 624                 $localfilename = GenerateRandomString(32, '', 7);
 625                 $full_localfilename = "$hashed_attachment_dir/$localfilename";
 626             }
 627
 628             $newAttachment = array();
 629             $newAttachment['localfilename'] = $localfilename;
 630             $newAttachment['remotefilename'] = $filename;
 631             $newAttachment['type'] = strtolower($message->type0 .
 632                                                 '/' . $message->type1);
 633             $newAttachment['id'] = strtolower($message->header->id);
 634             $newAttachment['session'] = $session;
 635
 636             /* Write Attachment to file */
 637             $fp = fopen ("$hashed_attachment_dir/$localfilename", 'w');
 638             fputs($fp, decodeBody(mime_fetch_body($imapConnection,
 639                 $passed_id, $message->entity_id),
 640                 $message->header->encoding));
 641             fclose ($fp);
 642
 643             $attachments[] = $newAttachment;
 644             setPref($data_dir, $username, 'attachments', $attachments);
 645         }
 646     } else {
 647         for ($i = 0; $i < count($message->entities); $i++) {
 648             getAttachments($message->entities[$i], $session, $passed_id, $entities, $imapConnection);
 649         }
 650     }
 651     return;
 652 }
 653
 654 function showInputForm ($session, $values=false) {
 655     global $send_to, $send_to_cc, $body,
 656            $passed_body, $color, $use_signature, $signature, $prefix_sig,
 657            $editor_size, $attachments, $subject, $newmail,
 658            $use_javascript_addr_book, $send_to_bcc, $passed_id, $mailbox,
 659            $from_htmladdr_search, $location_of_buttons, $attachment_dir,
 660            $username, $data_dir, $identity, $draft_id, $delete_draft,
 661            $mailprio, $default_use_mdn, $mdn_user_support, $compose_new_win,
 662            $saved_draft, $mail_sent, $sig_first, $edit_as_new, $action,
 663            $username;
 664
 665     $subject = decodeHeader($subject, false);
 666     if ($values) {
 667        $send_to = $values['send_to'];
 668        $send_to_cc = $values['send_to_cc'];
 669        $send_to_bcc = $values['send_to_bcc'];
 670        $subject = $values['subject'];
 671        $mailprio = $values['mailprio'];
 672        $body = $values['body'];
 673        $identity = $values['identity'];
 674     }
 675
 676     if ($use_javascript_addr_book) {
 677         echo "\n". '<SCRIPT LANGUAGE=JavaScript><!--' . "\n" .
 678              'function open_abook() { ' . "\n" .
 679              '  var nwin = window.open("addrbook_popup.php","abookpopup",' .
 680              '"width=670,height=300,resizable=yes,scrollbars=yes");' . "\n" .
 681              '  if((!nwin.opener) && (document.windows != null))' . "\n" .
 682              '    nwin.opener = document.windows;' . "\n" .
 683              "}\n" .
 684              '// --></SCRIPT>' . "\n\n";
 685     }
 686
 687     echo "\n" . '<FORM name=compose action="compose.php" METHOD=POST ' .
 688          'ENCTYPE="multipart/form-data"';
 689     do_hook("compose_form");
 690
 691
 692     echo ">\n";
 693
 694     if ($action == 'draft') {
 695         echo '<input type="hidden" name="delete_draft" value="' . $passed_id . "\">\n";
 696     }
 697     if (isset($delete_draft)) {
 698         echo '<input type="hidden" name="delete_draft" value="' . $delete_draft. "\">\n";
 699     }
 700     if (isset($session)) {
 701         echo '<input type="hidden" name="session" value="' . $session . "\">\n";
 702     }
 703
 704
 705     if ($saved_draft == 'yes') {
 706         echo '<BR><CENTER><B>'. _("Draft Saved").'</CENTER></B>';
 707     }
 708     if ($mail_sent == 'yes') {
 709         echo '<BR><CENTER><B>'. _("Your Message has been sent").'</CENTER></B>';
 710     }
 711     echo '<TABLE WIDTH="100%" ALIGN=center CELLSPACING=0 BORDER=0>' . "\n";
 712     if ($compose_new_win == '1') {
 713         echo '<TABLE ALIGN=CENTER BGCOLOR="'.$color[0].'" WIDTH="100%" BORDER=0>'."\n";
 714         echo '   <TR><TD></TD><TD ALIGN="RIGHT"><INPUT TYPE="BUTTON" NAME="Close" onClick="return self.close()" VALUE='._("Close").'></TD></TR>'."\n";
 715     }
 716     if ($location_of_buttons == 'top') {
 717         showComposeButtonRow();
 718     }
 719
 720     $idents = getPref($data_dir, $username, 'identities', 0);
 721     if ($idents > 1) {
 722         echo '   <TR>' . "\n" .
 723              '      <TD BGCOLOR="' . $color[4] . '" WIDTH="10%" ALIGN=RIGHT>' .
 724              "\n" .
 725              _("From:") .
 726              '      </TD><TD BGCOLOR="' . $color[4] . '" WIDTH="90%">' . "\n" .
 727              '<select name=identity>' . "\n" .
 728              '<option value=default>' .
 729              htmlspecialchars(getPref($data_dir, $username, 'full_name'));
 730         $em = getPref($data_dir, $username, 'email_address');
 731         if ($em != '') {
 732             echo htmlspecialchars(' <' . $em . '>') . "\n";
 733         }
 734         for ($i = 1; $i < $idents; $i ++) {
 735             echo '<option value="' . $i . '"';
 736             if (isset($identity) && $identity == $i) {
 737                 echo ' SELECTED';
 738             }
 739             echo '>' . htmlspecialchars(getPref($data_dir, $username,
 740                                                 'full_name' . $i));
 741             $em = getPref($data_dir, $username, 'email_address' . $i);
 742             if ($em != '') {
 743                 echo htmlspecialchars(' <' . $em . '>') . "\n";
 744             }
 745             echo '</option>';
 746         }
 747         echo '</select>' . "\n" .
 748              '      </TD>' . "\n" .
 749              '   </TR>' . "\n";
 750     }
 751     echo '   <TR>' . "\n" .
 752          '      <TD BGCOLOR="' . $color[4] . '" WIDTH="10%" ALIGN=RIGHT>' . "\n" .
 753          _("To:") .
 754          '      </TD><TD BGCOLOR="' . $color[4] . '" WIDTH="90%">' . "\n" .
 755          '         <INPUT TYPE=text NAME="send_to" VALUE="' .
 756          htmlspecialchars($send_to) . '" SIZE=60><BR>' . "\n" .
 757          '      </TD>' . "\n" .
 758          '   </TR>' . "\n" .
 759          '   <TR>' . "\n" .
 760          '      <TD BGCOLOR="' . $color[4] . '" ALIGN=RIGHT>' . "\n" .
 761          _("CC:") .
 762          '      </TD><TD BGCOLOR="' . $color[4] . '" ALIGN=LEFT>' . "\n" .
 763          '         <INPUT TYPE=text NAME="send_to_cc" SIZE=60 VALUE="' .
 764          htmlspecialchars($send_to_cc) . '"><BR>' . "\n" .
 765          '      </TD>' . "\n" .
 766          '   </TR>' . "\n" .
 767          '   <TR>' . "\n" .
 768          '      <TD BGCOLOR="' . $color[4] . '" ALIGN=RIGHT>' . "\n" .
 769          _("BCC:") .
 770          '      </TD><TD BGCOLOR="' . $color[4] . '" ALIGN=LEFT>' . "\n" .
 771          '         <INPUT TYPE=text NAME="send_to_bcc" VALUE="' .
 772          htmlspecialchars($send_to_bcc) . '" SIZE=60><BR>' . "\n" .
 773          '</TD></TR>' . "\n" .
 774          '   <TR>' . "\n" .
 775          '      <TD BGCOLOR="' . $color[4] . '" ALIGN=RIGHT>' . "\n" .
 776          _("Subject:") .
 777          '      </TD><TD BGCOLOR="' . $color[4] . '" ALIGN=LEFT>' . "\n";
 778         echo '         <INPUT TYPE=text NAME=subject SIZE=60 VALUE="' .
 779              htmlspecialchars($subject) . '">';
 780     echo '</td></tr>' . "\n\n";
 781
 782     if ($location_of_buttons == 'between') {
 783         showComposeButtonRow();
 784     }
 785     if ($compose_new_win == '1') {
 786         echo '   <TR>' . "\n" .
 787              '      <TD BGCOLOR="' . $color[0] . '" COLSPAN=2 ALIGN=CENTER>' . "\n" .
 788              '         <TEXTAREA NAME=body ROWS=20 COLS="' .
 789              $editor_size . '" WRAP="VIRTUAL">';
 790     }
 791     else {
 792         echo '   <TR>' . "\n" .
 793             '      <TD BGCOLOR="' . $color[4] . '" COLSPAN=2>' . "\n" .
 794             '         &nbsp;&nbsp;<TEXTAREA NAME=body ROWS=20 COLS="' .
 795             $editor_size . '" WRAP="VIRTUAL">';
 796     }
 797     if ($use_signature == true && $newmail == true && !isset($from_htmladdr_search)) {
 798         if ($sig_first == '1') {
 799             echo "\n\n".($prefix_sig==true? "-- \n":'').htmlspecialchars($signature);
 800             echo "\n\n".htmlspecialchars($body);
 801         }
 802         else {
 803             echo "\n\n".htmlspecialchars($body);
 804             echo "\n\n".($prefix_sig==true? "-- \n":'').htmlspecialchars($signature);
 805         }
 806     }
 807     else {
 808        echo htmlspecialchars($body);
 809     }
 810     echo '</TEXTAREA><BR>' . "\n" .
 811          '      </TD>' . "\n" .
 812          '   </TR>' . "\n";
 813
 814     if ($location_of_buttons == 'bottom') {
 815         showComposeButtonRow();
 816     } else {
 817         echo '   <TR><TD COLSPAN=2 ALIGN=LEFT>';
 818         echo ' &nbsp; <INPUT TYPE=SUBMIT NAME=send VALUE="' . _("Send") . '"></TD></TR>' . "\n";
 819     }
 820
 821     /* This code is for attachments */
 822     echo '   <TR>' . "\n" .
 823          '     <TD VALIGN=MIDDLE ALIGN=RIGHT>' . "\n" .
 824                 _("Attach:") .
 825          '      </TD>' . "\n" .
 826          '      <TD VALIGN=MIDDLE ALIGN=LEFT>' . "\n" .
 827          '      <INPUT NAME="attachfile" SIZE=48 TYPE="file">' . "\n" .
 828          '      &nbsp;&nbsp;<input type="submit" name="attach"' .
 829          ' value="' . _("Add") .'">' . "\n" .
 830          '     </TD>' . "\n" .
 831          '   </TR>' . "\n";
 832
 833     if (count($attachments)) {
 834         $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
 835         echo '<tr><td bgcolor="' . $color[0] . '" align=right>' . "\n" .
 836              '&nbsp;' .
 837              '</td><td align=left bgcolor="' . $color[0] . '">';
 838         foreach ($attachments as $key => $info) {
 839             if ($info['session'] == $session) {
 840                 $attached_file = "$hashed_attachment_dir/$info[localfilename]";
 841                 echo '<input type="checkbox" name="delete[]" value="' . $key . "\">\n" .
 842                         $info['remotefilename'] . ' - ' . $info['type'] . ' (' .
 843                         show_readable_size( filesize( $attached_file ) ) . ")<br>\n";
 844             }
 845         }
 846
 847         echo '<input type="submit" name="do_delete" value="' .
 848              _("Delete selected attachments") . "\">\n" .
 849              '</td></tr>';
 850     }
 851     /* End of attachment code */
 852     if ($compose_new_win == '1') {
 853         echo '</TABLE>'."\n";
 854     }
 855     echo '</TABLE>' . "\n";
 856
 857     echo '<input type="hidden" name="username" value="'. $username . "\">\n";
 858     echo '<input type=hidden name=action value=' . $action . ">\n";
 859     echo '<INPUT TYPE=hidden NAME=mailbox VALUE="' . htmlspecialchars($mailbox) .
 860          "\">\n" .
 861          '</FORM>';
 862     do_hook('compose_bottom');
 863     echo '</BODY></HTML>' . "\n";
 864 }
 865
 866
 867 function showComposeButtonRow() {
 868     global $use_javascript_addr_book, $save_as_draft,
 869         $default_use_priority, $mailprio, $default_use_mdn,
 870         $request_mdn, $request_dr,
 871         $data_dir, $username;
 872
 873     echo "  <TR><TD>\n</TD><TD>\n";
 874     if ($default_use_priority) {
 875         if(!isset($mailprio)) {
 876             $mailprio = "3";
 877     }
 878     echo _("Priority") .': <select name="mailprio">'.
 879          '<option value="1"'.($mailprio=='1'?' selected':'').'>'. _("High") .'</option>'.
 880          '<option value="3"'.($mailprio=='3'?' selected':'').'>'. _("Normal") .'</option>'.
 881          '<option value="5"'.($mailprio=='5'?' selected':'').'>'. _("Low").'</option>'.
 882          "</select>";
 883     }
 884     $mdn_user_support=getPref($data_dir, $username, 'mdn_user_support',$default_use_mdn);
 885     if ($default_use_mdn) {
 886         if ($mdn_user_support) {
 887             echo "\n\t". _("Receipt") .': '.
 888             '<input type="checkbox" name="request_mdn" value=1'.
 889                 ($request_mdn=='1'?' checked':'') .'>'. _("On read").
 890             ' <input type="checkbox" name="request_dr" value=1'.
 891                 ($request_dr=='1'?' checked':'') .'>'. _("On Delivery");
 892         }
 893     }
 894
 895     echo "   </td></tr>\n   <TR><td>\n   </td><td>\n";
 896     echo "\n    <INPUT TYPE=SUBMIT NAME=\"sigappend\" VALUE=\"". _("Signature") . "\">\n";
 897     if ($use_javascript_addr_book) {
 898         echo "      <SCRIPT LANGUAGE=JavaScript><!--\n document.write(\"".
 899              "         <input type=button value=\\\""._("Addresses").
 900                               "\\\" onclick='javascript:open_abook();'>\");".
 901              "         // --></SCRIPT><NOSCRIPT>\n".
 902              "         <input type=submit name=\"html_addr_search\" value=\"".
 903                               _("Addresses")."\">".
 904              "      </NOSCRIPT>\n";
 905     } else {
 906         echo "      <input type=submit name=\"html_addr_search\" value=\"".
 907                               _("Addresses")."\">";
 908     }
 909     echo "\n    <INPUT TYPE=SUBMIT NAME=send VALUE=\"". _("Send") . "\">\n";
 910
 911     if ($save_as_draft) {
 912         echo '<input type="submit" name ="draft" value="' . _("Save Draft") . "\">\n";
 913     }
 914
 915     do_hook('compose_button_row');
 916
 917     echo "   </TD></TR>\n\n";
 918 }
 919
 920 function checkInput ($show) {
 921     /*
 922      * I implemented the $show variable because the error messages
 923      * were getting sent before the page header.  So, I check once
 924      * using $show=false, and then when i'm ready to display the error
 925      * message, show=true
 926      */
 927     global $body, $send_to, $subject, $color;
 928
 929     if ($send_to == "") {
 930         if ($show) {
 931             plain_error_message(_("You have not filled in the \"To:\" field."), $color);
 932         }
 933         return false;
 934     }
 935     return true;
 936 } /* function checkInput() */
 937
 938
 939 /* True if FAILURE */
 940 function saveAttachedFiles($session) {
 941     global $HTTP_POST_FILES, $attachment_dir, $attachments, $username,
 942            $data_dir;
 943
 944     $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
 945     $localfilename = GenerateRandomString(32, '', 7);
 946     $full_localfilename = "$hashed_attachment_dir/$localfilename";
 947     while (file_exists($full_localfilename)) {
 948         $localfilename = GenerateRandomString(32, '', 7);
 949         $full_localfilename = "$hashed_attachment_dir/$localfilename";
 950     }
 951
 952     if (!@rename($HTTP_POST_FILES['attachfile']['tmp_name'], $full_localfilename)) {
 953         if (function_exists("move_uploaded_file")) {
 954                 if (!@move_uploaded_file($HTTP_POST_FILES['attachfile']['tmp_name'], $full_localfilename)) {
 955             return true;
 956                 }
 957         } else {
 958                 if (!@copy($HTTP_POST_FILES['attachfile']['tmp_name'], $full_localfilename)) {
 959                     return true;
 960                 }
 961         }
 962
 963     }
 964     $newAttachment['localfilename'] = $localfilename;
 965     $newAttachment['remotefilename'] = $HTTP_POST_FILES['attachfile']['name'];
 966     $newAttachment['type'] = strtolower($HTTP_POST_FILES['attachfile']['type']);
 967     $newAttachment['session'] = $session;
 968
 969     if ($newAttachment['type'] == "") {
 970          $newAttachment['type'] = 'application/octet-stream';
 971     }
 972     $attachments[] = $newAttachment;
 973     setPref($data_dir, $username, 'attachments', serialize($attachments));
 974 }
 975
 976
 977 function ClearAttachments($session)
 978 {
 979     global $username, $attachments, $attachment_dir, $data_dir;
 980     $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
 981
 982     $rem_attachments = array();
 983     if (is_array($attachments)) {
 984         foreach ($attachments as $info) {
 985                 if ($info['session'] == $session) {
 986                 $attached_file = "$hashed_attachment_dir/$info[localfilename]";
 987                 if (file_exists($attached_file)) {
 988                         unlink($attached_file);
 989                 }
 990                 }
 991             else {
 992                     $rem_attachments[] = $info;
 993                 }
 994         }
 995     }
 996     $attachments = $rem_attachments;
 997     setPref($data_dir, $username, 'attachments', serialize($attachments));
 998 }
 999
1000
1001 function getReplyCitation($orig_from)
1002 {
1003     global $reply_citation_style, $reply_citation_start, $reply_citation_end;
1004
1005     /* First, return an empty string when no citation style selected. */
1006     if (($reply_citation_style == '') || ($reply_citation_style == 'none')) {
1007         return '';
1008     }
1009
1010     /* Make sure our final value isn't an empty string. */
1011     if ($orig_from == '') {
1012         return '';
1013     }
1014
1015     /* Otherwise, try to select the desired citation style. */
1016     switch ($reply_citation_style) {
1017     case 'author_said':
1018         $start = '';
1019         $end   = ' ' . _("said") . ':';
1020         break;
1021     case 'quote_who':
1022         $start = '<' . _("quote") . ' ' . _("who") . '="';
1023         $end   = '">';
1024         break;
1025     case 'user-defined':
1026         $start = $reply_citation_start .
1027                  ($reply_citation_start == '' ? '' : ' ');
1028         $end   = $reply_citation_end;
1029         break;
1030     default:
1031         return '';
1032     }
1033
1034     /* Build and return the citation string. */
1035     return ($start . $orig_from . $end . "\n");
1036 }
1037
1038 ?>