src/compose.php

   1 <?php
   2 /**
   3  * compose.php
   4  *
   5  * This code sends a mail.
   6  *
   7  * There are 4 modes of operation:
   8  *    - Start new mail
   9  *    - Add an attachment
  10  *    - Send mail
  11  *    - Save As Draft
  12  *
  13  * @copyright 1999-2017 The SquirrelMail Project Team
  14  * @license http://opensource.org/licenses/gpl-license.php GNU Public License
  15  * @version $Id$
  16  * @package squirrelmail
  17  */
  18
  19 /** This is the compose page */
  20 define('PAGE_NAME', 'compose');
  21
  22 /**
  23  * Include the SquirrelMail initialization file.
  24  */
  25 require('../include/init.php');
  26
  27 /* If email_address not set and admin wants us to ask user for it,
  28  * redirect to options page. */
  29 if ( $ask_user_info && getPref($data_dir, $username,'email_address') == "" ) {
  30     header("Location: " . get_location() . "/options.php?optpage=personal");
  31     exit;
  32 }
  33
  34 /* SquirrelMail required files. */
  35 require_once(SM_PATH . 'functions/imap_general.php');
  36 require_once(SM_PATH . 'functions/imap_messages.php');
  37 require_once(SM_PATH . 'functions/date.php');
  38 require_once(SM_PATH . 'functions/mime.php');
  39 require_once(SM_PATH . 'functions/compose.php');
  40 require_once(SM_PATH . 'class/deliver/Deliver.class.php');
  41 require_once(SM_PATH . 'functions/addressbook.php');
  42 require_once(SM_PATH . 'functions/forms.php');
  43 require_once(SM_PATH . 'functions/identity.php');
  44 global $imap_stream_options; // in case not defined in config
  45
  46 /* --------------------- Get globals ------------------------------------- */
  47
  48 /** SESSION VARS */
  49 sqgetGlobalVar('delimiter', $delimiter,     SQ_SESSION);
  50
  51 sqgetGlobalVar('delayed_errors',  $delayed_errors,  SQ_SESSION);
  52 sqgetGlobalVar('composesession',    $composesession,    SQ_SESSION);
  53 sqgetGlobalVar('compose_messages',  $compose_messages,  SQ_SESSION);
  54
  55 // compose_messages only useful in SESSION when a forward-as-attachment
  56 // has been preconstructed for us and passed in via that mechanism; once
  57 // we have it, we can clear it from the SESSION
  58 sqsession_unregister('compose_messages');
  59
  60 // Turn on delayed error handling in case we wind up redirecting below
  61 $oErrorHandler->setDelayedErrors(true);
  62
  63 /** SESSION/POST/GET VARS */
  64 sqgetGlobalVar('send_button_count', $send_button_count, SQ_POST, 1, SQ_TYPE_INT);
  65 for ($i = 1; $i <= $send_button_count; $i++)
  66    if (sqgetGlobalVar('send' . $i, $send, SQ_POST)) break;
  67 // Send can only be achieved by setting $_POST var. If Send = true then
  68 // retrieve other form fields from $_POST
  69 if (isset($send) && $send) {
  70     $SQ_GLOBAL = SQ_POST;
  71 } else {
  72     $SQ_GLOBAL = SQ_FORM;
  73 }
  74 sqgetGlobalVar('session',$session, $SQ_GLOBAL);
  75 sqgetGlobalVar('mailbox',$mailbox, $SQ_GLOBAL);
  76 sqgetGlobalVar('identity',$orig_identity, $SQ_GLOBAL);
  77 if(!sqgetGlobalVar('identity',$identity, $SQ_GLOBAL)) {
  78     $identity=0;
  79 }
  80 sqgetGlobalVar('send_to',$send_to, $SQ_GLOBAL);
  81 sqgetGlobalVar('send_to_cc',$send_to_cc, $SQ_GLOBAL);
  82 sqgetGlobalVar('send_to_bcc',$send_to_bcc, $SQ_GLOBAL);
  83 sqgetGlobalVar('subject',$subject, $SQ_GLOBAL);
  84 sqgetGlobalVar('body',$body, $SQ_GLOBAL);
  85 sqgetGlobalVar('mailprio',$mailprio, $SQ_GLOBAL);
  86 sqgetGlobalVar('request_mdn',$request_mdn, $SQ_GLOBAL);
  87 sqgetGlobalVar('request_dr',$request_dr, $SQ_GLOBAL);
  88 sqgetGlobalVar('html_addr_search',$html_addr_search, $SQ_GLOBAL);
  89 sqgetGlobalVar('mail_sent',$mail_sent, $SQ_GLOBAL);
  90 sqgetGlobalVar('passed_id',$passed_id, $SQ_GLOBAL, NULL, SQ_TYPE_BIGINT);
  91 sqgetGlobalVar('passed_ent_id',$passed_ent_id, $SQ_GLOBAL);
  92 sqgetGlobalVar('fwduid',$fwduid, $SQ_GLOBAL, '');
  93
  94 sqgetGlobalVar('attach',$attach, SQ_POST);
  95 sqgetGlobalVar('draft',$draft, SQ_POST);
  96 sqgetGlobalVar('draft_id',$draft_id, $SQ_GLOBAL);
  97 sqgetGlobalVar('ent_num',$ent_num, $SQ_GLOBAL);
  98 sqgetGlobalVar('saved_draft',$saved_draft, SQ_FORM);
  99
 100 if ( sqgetGlobalVar('delete_draft',$delete_draft) ) {
 101     $delete_draft = (int)$delete_draft;
 102 }
 103
 104 if ( sqgetGlobalVar('startMessage',$startMessage) ) {
 105     $startMessage = (int)$startMessage;
 106 } else {
 107     $startMessage = 1;
 108 }
 109
 110
 111 /** POST VARS */
 112 sqgetGlobalVar('sigappend',             $sigappend,                 SQ_POST);
 113 sqgetGlobalVar('from_htmladdr_search',  $from_htmladdr_search,      SQ_POST);
 114 sqgetGlobalVar('addr_search_done',      $html_addr_search_done,     SQ_POST);
 115 sqgetGlobalVar('addr_search_cancel',    $html_addr_search_cancel,   SQ_POST);
 116 sqgetGlobalVar('send_to_search',        $send_to_search,            SQ_POST);
 117 sqgetGlobalVar('do_delete',             $do_delete,                 SQ_POST);
 118 sqgetGlobalVar('delete',                $delete,                    SQ_POST);
 119 sqgetGlobalVar('attachments',           $attachments,               SQ_POST);
 120 if ( sqgetGlobalVar('return', $temp, SQ_POST) ) {
 121     $html_addr_search_done = 'Use Addresses';
 122 }
 123
 124 /** GET VARS */
 125 if ( sqgetGlobalVar('account', $temp,  SQ_GET) ) {
 126     $iAccount = (int) $temp;
 127 } else {
 128     $iAccount = 0;
 129 }
 130
 131
 132 /** get smaction */
 133 if ( !sqgetGlobalVar('smaction',$action) )
 134 {
 135     if ( sqgetGlobalVar('smaction_reply',$tmp) )      $action = 'reply';
 136     if ( sqgetGlobalVar('smaction_reply_all',$tmp) )  $action = 'reply_all';
 137     if ( sqgetGlobalVar('smaction_forward',$tmp) )    $action = 'forward';
 138     if ( sqgetGlobalVar('smaction_attache',$tmp) )    $action = 'forward_as_attachment';
 139     if ( sqgetGlobalVar('smaction_draft',$tmp) )      $action = 'draft';
 140     if ( sqgetGlobalVar('smaction_edit_new',$tmp) )   $action = 'edit_as_new';
 141 }
 142
 143 sqgetGlobalVar('smtoken', $submitted_token, $SQ_GLOBAL, '');
 144
 145 /**
 146  * Here we decode the data passed in from mailto.php.
 147  */
 148 if ( sqgetGlobalVar('mailtodata', $mailtodata, SQ_GET) ) {
 149     $trtable = array('to'       => 'send_to',
 150                  'cc'           => 'send_to_cc',
 151                  'bcc'          => 'send_to_bcc',
 152                  'body'         => 'body',
 153                  'subject'      => 'subject');
 154     $mtdata = unserialize($mailtodata);
 155
 156     foreach ($trtable as $f => $t) {
 157         if ( !empty($mtdata[$f]) ) {
 158             $$t = $mtdata[$f];
 159         }
 160     }
 161     unset($mailtodata,$mtdata, $trtable);
 162 }
 163
 164 /* Location (For HTTP 1.1 header("Location: ...") redirects) */
 165 $location = get_location();
 166 /* Identities (fetch only once) */
 167 $idents = get_identities();
 168
 169 /* --------------------- Specific Functions ------------------------------ */
 170
 171 function replyAllString($header) {
 172     global $include_self_reply_all, $idents;
 173     $excl_ar = array();
 174     /**
 175      * 1) Remove the addresses we'll be sending the message 'to'
 176      */
 177     if (isset($header->reply_to)) {
 178         $excl_ar = $header->getAddr_a('reply_to');
 179     }
 180     /**
 181      * 2) Remove our identities from the CC list (they still can be in the
 182      * TO list) only if $include_self_reply_all is turned off
 183      */
 184     if (!$include_self_reply_all) {
 185         foreach($idents as $id) {
 186             $excl_ar[strtolower(trim($id['email_address']))] = '';
 187         }
 188     }
 189
 190     /**
 191      * 3) get the addresses.
 192      */
 193     $url_replytoall_ar = $header->getAddr_a(array('to','cc'), $excl_ar);
 194
 195     /**
 196      * 4) generate the string.
 197      */
 198     $url_replytoallcc = '';
 199     foreach( $url_replytoall_ar as $email => $personal) {
 200         if ($personal) {
 201             // always quote personal name (can't just quote it if
 202             // it contains a comma separator, since it might still
 203             // be encoded)
 204             $url_replytoallcc .= ", \"$personal\" <$email>";
 205         } else {
 206             $url_replytoallcc .= ', '. $email;
 207         }
 208     }
 209     $url_replytoallcc = substr($url_replytoallcc,2);
 210
 211     return $url_replytoallcc;
 212 }
 213
 214 /**
 215  * creates top line in reply citations
 216  *
 217  * Line style depends on user preferences.
 218  * $orig_date argument is available only from 1.4.3 and 1.5.1 version.
 219  * @param object $orig_from From: header object.
 220  * @param integer $orig_date email's timestamp
 221  * @return string reply citation
 222  */
 223 function getReplyCitation($orig_from, $orig_date) {
 224     global $reply_citation_style, $reply_citation_start, $reply_citation_end;
 225
 226     if (!is_object($orig_from)) {
 227         $sOrig_from = '';
 228     } else {
 229         $sOrig_from = decodeHeader($orig_from->getAddress(false),false,false,true);
 230     }
 231
 232     /* First, return an empty string when no citation style selected. */
 233     if (($reply_citation_style == '') || ($reply_citation_style == 'none')) {
 234         return '';
 235     }
 236
 237     /* Make sure our final value isn't an empty string. */
 238     if ($sOrig_from == '') {
 239         return '';
 240     }
 241
 242     /* Otherwise, try to select the desired citation style. */
 243     switch ($reply_citation_style) {
 244     case 'author_said':
 245         // i18n: %s is for author's name
 246         $full_reply_citation = sprintf(_("%s wrote:"),$sOrig_from);
 247         break;
 248     case 'quote_who':
 249         $start = '<quote who="';
 250         $end   = '">';
 251         $full_reply_citation = $start . $sOrig_from . $end;
 252         break;
 253     case 'date_time_author':
 254         // i18n:
 255         // The first %s is for date string, the second %s is for author's name.
 256         // The date uses formating from "D, F j, Y g:i a" and "D, F j, Y H:i"
 257         // translations.
 258         // Example string:
 259         // "On Sat, December 24, 2004 23:59, Santa wrote:"
 260         // If you have to put author's name in front of date string, check comments about
 261         // argument swapping at http://php.net/sprintf
 262         $full_reply_citation = sprintf(_("On %s, %s wrote:"), getLongDateString($orig_date), $sOrig_from);
 263         break;
 264     case 'user-defined':
 265         $start = $reply_citation_start .
 266             ($reply_citation_start == '' ? '' : ' ');
 267         $end   = $reply_citation_end;
 268         $full_reply_citation = $start . $sOrig_from . $end;
 269         break;
 270     default:
 271         return '';
 272     }
 273
 274     /* Add line feed and return the citation string. */
 275     return ($full_reply_citation . "\n");
 276 }
 277
 278 /**
 279  * Creates header fields in forwarded email body
 280  *
 281  * $default_charset global must be set correctly before you call this function.
 282  * @param object $orig_header
 283  * @return $string
 284  */
 285 function getforwardHeader($orig_header) {
 286     global $editor_size, $default_charset;
 287
 288     // using own strlen function in order to detect correct string length
 289     $display = array( _("Subject") => sq_strlen(_("Subject"),$default_charset),
 290             _("From")    => sq_strlen(_("From"),$default_charset),
 291             _("Date")    => sq_strlen(_("Date"),$default_charset),
 292             _("To")      => sq_strlen(_("To"),$default_charset),
 293             _("Cc")      => sq_strlen(_("Cc"),$default_charset) );
 294     $maxsize = max($display);
 295     $indent = str_pad('',$maxsize+2);
 296     foreach($display as $key => $val) {
 297         $display[$key] = $key .': '. str_pad('', $maxsize - $val);
 298     }
 299     $from = decodeHeader($orig_header->getAddr_s('from',"\n$indent"),false,false,true);
 300     $from = str_replace('&nbsp;',' ',$from);
 301     $to = decodeHeader($orig_header->getAddr_s('to',"\n$indent"),false,false,true);
 302     $to = str_replace('&nbsp;',' ',$to);
 303     $subject = decodeHeader($orig_header->subject,false,false,true);
 304     $subject = str_replace('&nbsp;',' ',$subject);
 305
 306     // using own str_pad function in order to create correct string pad
 307     $bodyTop =  sq_str_pad(' '._("Original Message").' ',$editor_size -2,'-',STR_PAD_BOTH,$default_charset) .
 308         "\n". $display[_("Subject")] . $subject . "\n" .
 309         $display[_("From")] . $from . "\n" .
 310         $display[_("Date")] . getLongDateString( $orig_header->date, $orig_header->date_unparsed ). "\n" .
 311         $display[_("To")] . $to . "\n";
 312     if ($orig_header->cc != array() && $orig_header->cc !='') {
 313         $cc = decodeHeader($orig_header->getAddr_s('cc',"\n$indent"),false,false,true);
 314         $cc = str_replace('&nbsp;',' ',$cc);
 315         $bodyTop .= $display[_("Cc")] .$cc . "\n";
 316     }
 317     $bodyTop .= str_pad('', $editor_size -2 , '-') .
 318         "\n\n";
 319     return $bodyTop;
 320 }
 321 /* ----------------------------------------------------------------------- */
 322
 323 /*
 324  * If the session is expired during a post this restores the compose session
 325  * vars.
 326  */
 327 $session_expired = false;
 328 if (sqsession_is_registered('session_expired_post')) {
 329     sqgetGlobalVar('session_expired_post', $session_expired_post, SQ_SESSION);
 330     /*
 331      * extra check for username so we don't display previous post data from
 332      * another user during this session.
 333      */
 334     if (!empty($session_expired_post['username'])
 335      && $session_expired_post['username'] == $username) {
 336         // these are the vars that we can set from the expired composed session
 337         $compo_var_list = array ('send_to', 'send_to_cc', 'body',
 338             'startMessage', 'passed_body', 'use_signature', 'signature',
 339             'subject', 'newmail', 'send_to_bcc', 'passed_id', 'mailbox',
 340             'from_htmladdr_search', 'identity', 'draft_id', 'delete_draft',
 341             'mailprio', 'edit_as_new', 'attachments', 'composesession',
 342             'request_mdn', 'request_dr', 'fwduid');
 343
 344         foreach ($compo_var_list as $var) {
 345             if ( isset($session_expired_post[$var]) && !isset($$var) ) {
 346                 $$var = $session_expired_post[$var];
 347             }
 348         }
 349
 350         if (!empty($attachments))
 351             $attachments = unserialize(urldecode($attachments));
 352
 353         sqsession_register($composesession,'composesession');
 354
 355         if (isset($send)) {
 356             unset($send);
 357         }
 358         $session_expired = true;
 359     }
 360     unset($session_expired_post);
 361     sqsession_unregister('session_expired_post');
 362     session_write_close();
 363     if (!isset($mailbox)) {
 364         $mailbox = '';
 365     }
 366     if ($compose_new_win == '1') {
 367         compose_Header($color, $mailbox);
 368     } else {
 369         $sHeaderJs = (isset($sHeaderJs)) ? $sHeaderJs : '';
 370         if (strpos($action, 'reply') !== false && $reply_focus) {
 371             $sOnload = 'checkForm(\''.$replyfocus.'\');';
 372         } else {
 373             $sOnload = 'checkForm();';
 374         }
 375         displayPageHeader($color, $mailbox,$sHeaderJs,$sOnload);
 376     }
 377     showInputForm($session, false);
 378     exit();
 379 }
 380
 381 if (!isset($composesession)) {
 382     $composesession = 0;
 383     sqsession_register(0,'composesession');
 384 } else {
 385     $composesession = (int)$composesession;
 386 }
 387
 388 if (!isset($session) || (isset($newmessage) && $newmessage)) {
 389     sqsession_unregister('composesession');
 390     $session = "$composesession" +1;
 391     $composesession = $session;
 392     sqsession_register($composesession,'composesession');
 393 }
 394 if (!empty($compose_messages[$session])) {
 395     $composeMessage = $compose_messages[$session];
 396 } else {
 397     $composeMessage = new Message();
 398     $rfc822_header = new Rfc822Header();
 399     $composeMessage->rfc822_header = $rfc822_header;
 400     $composeMessage->reply_rfc822_header = '';
 401 }
 402
 403 // re-add attachments that were already in this message
 404 // FIXME: note that technically this is very bad form -
 405 // should never directly manipulate an object like this
 406 if (!empty($attachments)) {
 407     $attachments = unserialize(urldecode($attachments));
 408     if (!empty($attachments) && is_array($attachments))
 409         $composeMessage->entities = $attachments;
 410 }
 411
 412 if (empty($mailbox)) {
 413     $mailbox = 'INBOX';
 414 }
 415
 416 if ($draft) {
 417
 418     // validate security token
 419     //
 420     sm_validate_security_token($submitted_token, -1, TRUE);
 421
 422     /*
 423      * Set $default_charset to correspond with the user's selection
 424      * of language interface.
 425      */
 426     set_my_charset();
 427     if (! deliverMessage($composeMessage, true)) {
 428         showInputForm($session);
 429         exit();
 430     } else {
 431         $draft_message = _("Draft Email Saved");
 432         /* If this is a resumed draft, then delete the original */
 433         if(isset($delete_draft)) {
 434             $imap_stream = sqimap_login($username, false, $imapServerAddress, $imapPort, false, $imap_stream_options);
 435             sqimap_mailbox_select($imap_stream, $draft_folder);
 436             // force bypass_trash=true because message should be saved when deliverMessage() returns true.
 437             // in current implementation of sqimap_msgs_list_flag() single message id can
 438             // be submitted as string. docs state that it should be array.
 439             sqimap_msgs_list_delete($imap_stream, $draft_folder, $delete_draft, true);
 440             if ($auto_expunge) {
 441                 sqimap_mailbox_expunge($imap_stream, $draft_folder, true);
 442             }
 443             sqimap_logout($imap_stream);
 444         }
 445
 446         $oErrorHandler->saveDelayedErrors();
 447         session_write_close();
 448
 449         if ($compose_new_win == '1') {
 450             if ( !isset($pageheader_sent) || !$pageheader_sent ) {
 451                 header("Location: $location/compose.php?saved_draft=yes&session=$composesession");
 452             } else {
 453 //FIXME: DON'T ECHO HTML FROM CORE!
 454                 echo '   <br><br><div style="text-align: center;"><a href="' . $location
 455                     . '/compose.php?saved_sent=yes&amp;session=' . $composesession . '">'
 456                     . _("Return") . '</a></div>';
 457             }
 458             exit();
 459         } else {
 460             if ( !isset($pageheader_sent) || !$pageheader_sent ) {
 461                 header("Location: $location/right_main.php?mailbox=" . urlencode($draft_folder) .
 462                    "&startMessage=1&note=".urlencode($draft_message));
 463             } else {
 464 //FIXME: DON'T ECHO HTML FROM CORE!
 465                 echo '   <br><br><div style="text-align: center;"><a href="' . $location
 466                     . '/right_main.php?mailbox=' . urlencode($draft_folder)
 467                     . '&amp;startMessage=1&amp;note=' . urlencode($draft_message) .'">'
 468                     . _("Return") . '</a></div>';
 469             }
 470             exit();
 471         }
 472     }
 473 }
 474
 475 if ($send) {
 476
 477     // validate security token
 478     //
 479     sm_validate_security_token($submitted_token, -1, TRUE);
 480
 481     if (isset($_FILES['attachfile']) &&
 482             $_FILES['attachfile']['tmp_name'] &&
 483             $_FILES['attachfile']['tmp_name'] != 'none') {
 484         $AttachFailure = saveAttachedFiles($session);
 485     }
 486
 487     if (checkInput(false) && !isset($AttachFailure)) {
 488         if ($mailbox == "All Folders") {
 489             /* We entered compose via the search results page */
 490             $mailbox = 'INBOX'; /* Send 'em to INBOX, that's safe enough */
 491         }
 492         $urlMailbox = urlencode($mailbox);
 493         if (! isset($passed_id)) {
 494             $passed_id = 0;
 495         }
 496         /**
 497          * Set $default_charset to correspond with the user's selection
 498          * of language interface.
 499          */
 500         set_my_charset();
 501         /**
 502          * This is to change all newlines to \n
 503          * We'll change them to \r\n later (in the sendMessage function)
 504          */
 505         $body = str_replace("\r\n", "\n", $body);
 506         $body = str_replace("\r", "\n", $body);
 507
 508         /**
 509          * Rewrap $body so that no line is bigger than $editor_size
 510          */
 511         $body = explode("\n", $body);
 512         $newBody = '';
 513         foreach ($body as $line) {
 514             if( $line <> '-- ' ) {
 515                 $line = rtrim($line);
 516             }
 517             if (sq_strlen($line, $default_charset) <= $editor_size + 1) {
 518                 $newBody .= $line . "\n";
 519             } else {
 520                 sqWordWrap($line, $editor_size, $default_charset);
 521                 $newBody .= $line . "\n";
 522
 523             }
 524
 525         }
 526         $body = $newBody;
 527
 528         $Result = deliverMessage($composeMessage);
 529
 530         if ($Result)
 531             $mail_sent = 'yes';
 532         else
 533             $mail_sent = 'no';
 534
 535         // NOTE: this hook changed in 1.5.2 from sending $Result and
 536         //       $composeMessage as args #2 and #3 to being in an array
 537         //       under arg #2
 538         $temp = array(&$Result, &$composeMessage, &$mail_sent);
 539         do_hook('compose_send_after', $temp);
 540         if (! $Result) {
 541             showInputForm($session);
 542             exit();
 543         }
 544
 545         /* if it is resumed draft, delete draft message */
 546         if ( isset($delete_draft)) {
 547             $imap_stream = sqimap_login($username, false, $imapServerAddress, $imapPort, false, $imap_stream_options);
 548             sqimap_mailbox_select($imap_stream, $draft_folder);
 549             // bypass_trash=true because message should be saved when deliverMessage() returns true.
 550             // in current implementation of sqimap_msgs_list_flag() single message id can
 551             // be submitted as string. docs state that it should be array.
 552             sqimap_msgs_list_delete($imap_stream, $draft_folder, $delete_draft, true);
 553             if ($auto_expunge) {
 554                 sqimap_mailbox_expunge($imap_stream, $draft_folder, true);
 555             }
 556             sqimap_logout($imap_stream);
 557         }
 558         /*
 559          * Store the error array in the session because they will be lost on a redirect
 560          */
 561         $oErrorHandler->saveDelayedErrors();
 562         session_write_close();
 563
 564         if ($compose_new_win == '1') {
 565             if ( !isset($pageheader_sent) || !$pageheader_sent ) {
 566                 header("Location: $location/compose.php?mail_sent=$mail_sent");
 567             } else {
 568 //FIXME: DON'T ECHO HTML FROM CORE!
 569                 echo '   <br><br><div style="text-align: center;"><a href="' . $location
 570                     . '/compose.php?mail_sent=$mail_sent">'
 571                     . _("Return") . '</a></div>';
 572             }
 573             exit();
 574         } else {
 575             if ( !isset($pageheader_sent) || !$pageheader_sent ) {
 576                 global $return_to_message_after_reply;
 577                 if (($action === 'reply' || $action === 'reply_all') && $return_to_message_after_reply)
 578                     header("Location: $location/read_body.php?passed_id=$passed_id&mailbox=$urlMailbox".
 579                             "&startMessage=$startMessage&mail_sent=$mail_sent");
 580                 else
 581                     header("Location: $location/right_main.php?mailbox=$urlMailbox".
 582                             "&startMessage=$startMessage&mail_sent=$mail_sent");
 583             } else {
 584 //FIXME: DON'T ECHO HTML FROM CORE!
 585                 echo '   <br><br><div style="text-align: center;"><a href="' . $location
 586                     . "/right_main.php?mailbox=$urlMailbox"
 587                     . "&amp;startMessage=$startMessage&amp;mail_sent=$mail_sent\">"
 588                     . _("Return") . '</a></div>';
 589             }
 590             exit();
 591         }
 592     } else {
 593         if ($compose_new_win == '1') {
 594             compose_Header($color, $mailbox);
 595         }
 596         else {
 597             displayPageHeader($color, $mailbox);
 598         }
 599         if (isset($AttachFailure)) {
 600             plain_error_message(_("Could not move/copy file. File not attached"),
 601                     $color);
 602         }
 603         checkInput(true);
 604         showInputForm($session);
 605         /* sqimap_logout($imapConnection); */
 606     }
 607 } elseif (isset($html_addr_search_done)) {
 608
 609     // validate security token
 610     //
 611     sm_validate_security_token($submitted_token, -1, TRUE);
 612
 613     if ($compose_new_win == '1') {
 614         compose_Header($color, $mailbox);
 615     }
 616     else {
 617         displayPageHeader($color, $mailbox);
 618     }
 619
 620     if (isset($send_to_search) && is_array($send_to_search)) {
 621         foreach ($send_to_search as $k => $v) {
 622             if (substr($k, 0, 1) == 'T') {
 623                 if ($send_to) {
 624                     $send_to .= ', ';
 625                 }
 626                 $send_to .= $v;
 627             }
 628             elseif (substr($k, 0, 1) == 'C') {
 629                 if ($send_to_cc) {
 630                     $send_to_cc .= ', ';
 631                 }
 632                 $send_to_cc .= $v;
 633             }
 634             elseif (substr($k, 0, 1) == 'B') {
 635                 if ($send_to_bcc) {
 636                     $send_to_bcc .= ', ';
 637                 }
 638                 $send_to_bcc .= $v;
 639             }
 640         }
 641     }
 642     showInputForm($session);
 643 } elseif (isset($html_addr_search) && !isset($html_addr_search_cancel)) {
 644     if (isset($_FILES['attachfile']) &&
 645             $_FILES['attachfile']['tmp_name'] &&
 646             $_FILES['attachfile']['tmp_name'] != 'none') {
 647         if(saveAttachedFiles($session)) {
 648             plain_error_message(_("Could not move/copy file. File not attached"));
 649         }
 650     }
 651     /*
 652      * I am using an include so as to elminiate an extra unnecessary
 653      * click.  If you can think of a better way, please implement it.
 654      */
 655     include_once('./addrbook_search_html.php');
 656 } elseif (isset($attach)) {
 657
 658     // validate security token
 659     //
 660     sm_validate_security_token($submitted_token, -1, TRUE);
 661
 662     if ($compose_new_win == '1') {
 663         compose_Header($color, $mailbox);
 664     } else {
 665         displayPageHeader($color, $mailbox);
 666     }
 667     if (saveAttachedFiles($session)) {
 668         plain_error_message(_("Could not move/copy file. File not attached"));
 669     }
 670     showInputForm($session);
 671 }
 672 elseif (isset($sigappend)) {
 673
 674     // validate security token
 675     //
 676     sm_validate_security_token($submitted_token, -1, TRUE);
 677
 678     $signature = $idents[$identity]['signature'];
 679
 680     $body .= "\n\n".($prefix_sig==true? "-- \n":'').$signature;
 681     if ($compose_new_win == '1') {
 682         compose_Header($color, $mailbox);
 683     } else {
 684         displayPageHeader($color, $mailbox);
 685     }
 686     showInputForm($session);
 687 } elseif (isset($do_delete)) {
 688
 689     // validate security token
 690     //
 691     sm_validate_security_token($submitted_token, -1, TRUE);
 692
 693     if ($compose_new_win == '1') {
 694         compose_Header($color, $mailbox);
 695     } else {
 696         displayPageHeader($color, $mailbox);
 697     }
 698
 699     if (isset($delete) && is_array($delete)) {
 700         foreach($delete as $index) {
 701             if (!empty($composeMessage->entities) && isset($composeMessage->entities[$index])) {
 702                 $composeMessage->entities[$index]->purgeAttachments();
 703                 // FIXME: one person reported that unset() didn't do anything at all here, so this is a work-around... but it triggers PHP notices if the unset() doesn't work, which should be fixed... but bigger question is if unset() doesn't work here, what about everywhere else? Anyway, uncomment this if you think you need it
 704                 //$composeMessage->entities[$index] = NULL;
 705                 unset ($composeMessage->entities[$index]);
 706             }
 707         }
 708         $new_entities = array();
 709         foreach ($composeMessage->entities as $entity) {
 710             $new_entities[] = $entity;
 711         }
 712         $composeMessage->entities = $new_entities;
 713     }
 714     showInputForm($session);
 715 } else {
 716     /*
 717      * This handles the default case as well as the error case
 718      * (they had the same code) --> if (isset($smtpErrors))
 719      */
 720
 721     if ($compose_new_win == '1') {
 722         compose_Header($color, $mailbox);
 723     } else {
 724         displayPageHeader($color, $mailbox);
 725     }
 726
 727     $newmail = true;
 728
 729     if (!isset($passed_ent_id)) {
 730         $passed_ent_id = '';
 731     }
 732     if (!isset($passed_id)) {
 733         $passed_id = '';
 734     }
 735     if (!isset($mailbox)) {
 736         $mailbox = '';
 737     }
 738     if (!isset($action)) {
 739         $action = '';
 740     }
 741
 742     $values = newMail($mailbox,$passed_id,$passed_ent_id, $action, $session);
 743
 744     // forward as attachment - subject is in the message in session
 745     //
 746     if ($action == 'forward_as_attachment' && empty($values['subject']))
 747         $subject = $composeMessage->rfc822_header->subject;
 748
 749     /* in case the origin is not read_body.php */
 750     if (isset($send_to)) {
 751         $values['send_to'] = $send_to;
 752     }
 753     if (isset($send_to_cc)) {
 754         $values['send_to_cc'] = $send_to_cc;
 755     }
 756     if (isset($send_to_bcc)) {
 757         $values['send_to_bcc'] = $send_to_bcc;
 758     }
 759     if (isset($subject)) {
 760         $values['subject'] = $subject;
 761     }
 762     if (isset($mailprio)) {
 763         $values['mailprio'] = $mailprio;
 764     }
 765     if (isset($orig_identity)) {
 766         $values['identity'] = $orig_identity;
 767     }
 768     showInputForm($session, $values);
 769 }
 770
 771 exit();
 772
 773 /**************** Only function definitions go below *************/
 774
 775 function getforwardSubject($subject)
 776 {
 777     if ((substr(strtolower($subject), 0, 4) != 'fwd:') &&
 778             (substr(strtolower($subject), 0, 5) != '[fwd:') &&
 779             (substr(strtolower($subject), 0, 6) != '[ fwd:')) {
 780         $subject = '[Fwd: ' . $subject . ']';
 781     }
 782     return $subject;
 783 }
 784
 785 /* This function is used when not sending or adding attachments */
 786 function newMail ($mailbox='', $passed_id='', $passed_ent_id='', $action='', $session='') {
 787     global $editor_size, $default_use_priority, $body, $idents,
 788         $use_signature, $data_dir, $username,
 789         $key, $imapServerAddress, $imapPort, $imap_stream_options,
 790         $composeMessage, $body_quote, $request_mdn, $request_dr,
 791         $mdn_user_support, $languages, $squirrelmail_language,
 792         $default_charset, $do_not_reply_to_self;
 793
 794     /*
 795      * Set $default_charset to correspond with the user's selection
 796      * of language interface. $default_charset global is not correct,
 797      * if message is composed in new window.
 798      */
 799     set_my_charset();
 800
 801     $send_to = $send_to_cc = $send_to_bcc = $subject = $identity = '';
 802     $mailprio = 3;
 803
 804     if ($passed_id) {
 805         $imapConnection = sqimap_login($username, false, $imapServerAddress,
 806                 $imapPort, 0, $imap_stream_options);
 807
 808         sqimap_mailbox_select($imapConnection, $mailbox);
 809         $message = sqimap_get_message($imapConnection, $passed_id, $mailbox);
 810
 811         $body = '';
 812         if ($passed_ent_id) {
 813             /* redefine the messsage in case of message/rfc822 */
 814             $message = $message->getEntity($passed_ent_id);
 815             /* message is an entity which contains the envelope and type0=message
 816              * and type1=rfc822. The actual entities are childs from
 817              * $message->entities[0]. That's where the encoding and is located
 818              */
 819
 820             $entities = $message->entities[0]->findDisplayEntity
 821                 (array(), $alt_order = array('text/plain'));
 822             if (!count($entities)) {
 823                 $entities = $message->entities[0]->findDisplayEntity
 824                     (array(), $alt_order = array('text/plain','text/html'));
 825             }
 826             $orig_header = $message->rfc822_header; /* here is the envelope located */
 827             /* redefine the message for picking up the attachments */
 828             $message = $message->entities[0];
 829
 830         } else {
 831             $entities = $message->findDisplayEntity (array(), $alt_order = array('text/plain'));
 832             if (!count($entities)) {
 833                 $entities = $message->findDisplayEntity (array(), $alt_order = array('text/plain','text/html'));
 834             }
 835             $orig_header = $message->rfc822_header;
 836         }
 837
 838         $type0 = $message->type0;
 839         $type1 = $message->type1;
 840         foreach ($entities as $ent) {
 841             $msg = $message->getEntity($ent);
 842             $type0 = $msg->type0;
 843             $type1 = $msg->type1;
 844             $unencoded_bodypart = mime_fetch_body($imapConnection, $passed_id, $ent);
 845             $body_part_entity = $message->getEntity($ent);
 846             $bodypart = decodeBody($unencoded_bodypart,
 847                     $body_part_entity->header->encoding);
 848             if ($type1 == 'html') {
 849                 $bodypart = str_replace("\n", ' ', $bodypart);
 850                 $bodypart = preg_replace(array('/<\/?p>/i','/<div><\/div>/i','/<br\s*(\/)*>/i','/<\/?div>/i'), "\n", $bodypart);
 851                 $bodypart = str_replace(array('&nbsp;','&gt;','&lt;'),array(' ','>','<'),$bodypart);
 852                 $bodypart = strip_tags($bodypart);
 853             }
 854             if (isset($languages[$squirrelmail_language]['XTRA_CODE']) &&
 855                     function_exists($languages[$squirrelmail_language]['XTRA_CODE'] . '_decode')) {
 856                 if (mb_detect_encoding($bodypart) != 'ASCII') {
 857                     $bodypart = call_user_func($languages[$squirrelmail_language]['XTRA_CODE'] . '_decode', $bodypart);
 858                 }
 859             }
 860
 861             // charset encoding in compose form stuff
 862             if (isset($body_part_entity->header->parameters['charset'])) {
 863                 $actual = $body_part_entity->header->parameters['charset'];
 864             } else {
 865                 $actual = 'us-ascii';
 866             }
 867
 868             if ( $actual && is_conversion_safe($actual) && $actual != $default_charset){
 869                 $bodypart = charset_convert($actual,$bodypart,$default_charset,false);
 870             }
 871             // end of charset encoding in compose
 872
 873             $body .= $bodypart;
 874         }
 875         if ($default_use_priority) {
 876             $mailprio = substr($orig_header->priority,0,1);
 877             if (!$mailprio) {
 878                 $mailprio = 3;
 879             }
 880         } else {
 881             $mailprio = '';
 882         }
 883
 884         $from_o = $orig_header->from;
 885         if (is_array($from_o)) {
 886             if (isset($from_o[0])) {
 887                 $from_o = $from_o[0];
 888             }
 889         }
 890         if (is_object($from_o)) {
 891             $orig_from = $from_o->getAddress();
 892         } else {
 893             $orig_from = '';
 894         }
 895
 896         $identities = array();
 897         if (count($idents) > 1) {
 898             foreach($idents as $nr=>$data) {
 899                 $enc_from_name = '"'.$data['full_name'].'" <'. $data['email_address'].'>';
 900                 $identities[] = $enc_from_name;
 901             }
 902
 903             $identity_match = $orig_header->findAddress($identities);
 904             if ($identity_match !== FALSE) {
 905                 $identity = $identity_match;
 906             }
 907         }
 908
 909         switch ($action) {
 910             case ('draft'):
 911                 $use_signature = FALSE;
 912                 $composeMessage->rfc822_header = $orig_header;
 913                 $send_to = decodeHeader($orig_header->getAddr_s('to'),false,false,true);
 914                 $send_to_cc = decodeHeader($orig_header->getAddr_s('cc'),false,false,true);
 915                 $send_to_bcc = decodeHeader($orig_header->getAddr_s('bcc'),false,false,true);
 916                 $send_from = $orig_header->getAddr_s('from');
 917                 $send_from_parts = new AddressStructure();
 918                 $send_from_parts = $orig_header->parseAddress($send_from);
 919                 $send_from_add = $send_from_parts->mailbox . '@' . $send_from_parts->host;
 920                 $identity = find_identity(array($send_from_add));
 921                 $subject = decodeHeader($orig_header->subject,false,false,true);
 922
 923                 // Remember the receipt settings
 924                 $request_mdn = $mdn_user_support && !empty($orig_header->dnt) ? '1' : '0';
 925                 $request_dr = $mdn_user_support && !empty($orig_header->drnt) ? '1' : '0';
 926
 927                 /* remember the references and in-reply-to headers in case of an reply */
 928 //FIXME: it would be better to fiddle with headers inside of the message object or possibly when delivering the message to its destination (drafts folder?); is this possible?
 929                 $composeMessage->rfc822_header->more_headers['References'] = $orig_header->references;
 930                 $composeMessage->rfc822_header->more_headers['In-Reply-To'] = $orig_header->in_reply_to;
 931                 // rewrap the body to clean up quotations and line lengths
 932                 sqBodyWrap($body, $editor_size);
 933                 $composeMessage = getAttachments($message, $composeMessage, $passed_id, $entities, $imapConnection);
 934                 if (!empty($orig_header->x_sm_flag_reply))
 935                     $composeMessage->rfc822_header->more_headers['X-SM-Flag-Reply'] = $orig_header->x_sm_flag_reply;
 936 //TODO: completely unclear if should be using $compose_session instead of $session below
 937                 $compose_messages[$session] = $composeMessage;
 938                 sqsession_register($compose_messages,'compose_messages');
 939                 break;
 940             case ('edit_as_new'):
 941                 $send_to = decodeHeader($orig_header->getAddr_s('to'),false,false,true);
 942                 $send_to_cc = decodeHeader($orig_header->getAddr_s('cc'),false,false,true);
 943                 $send_to_bcc = decodeHeader($orig_header->getAddr_s('bcc'),false,false,true);
 944                 $subject = decodeHeader($orig_header->subject,false,false,true);
 945                 $mailprio = $orig_header->priority;
 946                 $orig_from = '';
 947                 $composeMessage = getAttachments($message, $composeMessage, $passed_id, $entities, $imapConnection);
 948                 // rewrap the body to clean up quotations and line lengths
 949                 sqBodyWrap($body, $editor_size);
 950                 break;
 951             case ('forward'):
 952                 $send_to = '';
 953                 $subject = getforwardSubject(decodeHeader($orig_header->subject,false,false,true));
 954                 $body = getforwardHeader($orig_header) . $body;
 955                 // the logic for calling sqUnWordWrap here would be to allow the browser to wrap the lines
 956                 // forwarded message text should be as undisturbed as possible, so commenting out this call
 957                 // sqUnWordWrap($body);
 958                 $composeMessage = getAttachments($message, $composeMessage, $passed_id, $entities, $imapConnection);
 959
 960                 //add a blank line after the forward headers
 961                 $body = "\n" . $body;
 962                 break;
 963             case ('forward_as_attachment'):
 964                 $subject = getforwardSubject(decodeHeader($orig_header->subject,false,false,true));
 965                 $composeMessage = getMessage_RFC822_Attachment($message, $composeMessage, $passed_id, $passed_ent_id, $imapConnection);
 966                 $subject = decodeHeader($orig_header->subject,false,false,true);
 967                 $subject = str_replace('"', "'", $subject);
 968                 $subject = trim($subject);
 969                 if (substr(strtolower($subject), 0, 4) != 'fwd:') {
 970                     $subject = 'Fwd: ' . $subject;
 971                 }
 972                 $body = '';
 973                 break;
 974             case ('reply_all'):
 975                 if(isset($orig_header->mail_followup_to) && $orig_header->mail_followup_to) {
 976                     $send_to = $orig_header->getAddr_s('mail_followup_to');
 977                 } else {
 978                     $send_to_cc = replyAllString($orig_header);
 979                     $send_to_cc = decodeHeader($send_to_cc,false,false,true);
 980                     $send_to_cc = str_replace('""', '"', $send_to_cc);
 981                 }
 982             case ('reply'):
 983                 // skip this if send_to was already set right above here
 984                 if(!$send_to) {
 985                     $send_to = $orig_header->reply_to;
 986                     if (is_array($send_to) && count($send_to)) {
 987                         $send_to = $orig_header->getAddr_s('reply_to', ',', FALSE, TRUE);
 988                     } else if (is_object($send_to)) { /* unneccesarry, just for failsafe purpose */
 989                         $send_to = $orig_header->getAddr_s('reply_to', ',', FALSE, TRUE);
 990                     } else {
 991                         $send_to = $orig_header->getAddr_s('from', ',', FALSE, TRUE);
 992                     }
 993                 }
 994                 $send_to = decodeHeader($send_to,false,false,true);
 995                 $send_to = str_replace('""', '"', $send_to);
 996
 997
 998                 // If user doesn't want replies to her own messages
 999                 // going back to herself (instead send again to the
1000                 // original recipient of the message being replied to),
1001                 // then iterate through identities, checking if the TO
1002                 // field is one of them (if the reply is to ourselves)
1003                 //
1004                 // Note we don't bother if the original message doesn't
1005                 // have anything in the TO field itself (because that's
1006                 // what we use if we change the recipient to be that of
1007                 // the previous message)
1008                 //
1009                 if ($do_not_reply_to_self && !empty($orig_header->to)) {
1010
1011                     $orig_to = '';
1012
1013                     foreach($idents as $id) {
1014
1015                         if (!empty($id['email_address'])
1016                          && strpos($send_to, $id['email_address']) !== FALSE) {
1017
1018                             // if this is a reply-all, the original recipient
1019                             // is already in the CC field, so we can just blank
1020                             // the recipient (TO field) (as long as the CC field
1021                             // isn't empty that is)... but then move the CC into
1022                             // the TO, so TO isn't empty
1023                             //
1024                             if ($action == 'reply_all' && !empty($send_to_cc)) {
1025                                 $orig_to = $send_to_cc;
1026                                 $send_to_cc = '';
1027                                 break;
1028                             }
1029
1030                             $orig_to = $orig_header->to;
1031                             if (is_array($orig_to) && count($orig_to)) {
1032                                 $orig_to = $orig_header->getAddr_s('to', ',', FALSE, TRUE);
1033                             } else if (is_object($orig_to)) { /* unneccesarry, just for failsafe purpose */
1034                                 $orig_to = $orig_header->getAddr_s('to', ',', FALSE, TRUE);
1035                             } else {
1036                                 $orig_to = '';
1037                             }
1038                             $orig_to = decodeHeader($orig_to,false,false,true);
1039                             $orig_to = str_replace('""', '"', $orig_to);
1040
1041                             break;
1042                         }
1043                     }
1044
1045                     // if the reply was addressed back to ourselves,
1046                     // we will send it to the TO of the previous message
1047                     //
1048                     if (!empty($orig_to)) {
1049
1050                         $send_to = $orig_to;
1051
1052                         // in this case, we also want to reset the FROM
1053                         // identity as well (it should match the original
1054                         // *FROM* header instead of TO or CC)
1055                         //
1056                         if (count($idents) > 1) {
1057                             $identity = '';
1058                             foreach($idents as $i => $id) {
1059                                 if (!empty($id['email_address'])
1060                                  && strpos($orig_from, $id['email_address']) !== FALSE) {
1061                                     $identity = $i;
1062                                     break;
1063                                 }
1064                             }
1065                         }
1066
1067                     }
1068
1069                 }
1070
1071
1072                 $subject = decodeHeader($orig_header->subject,false,false,true);
1073                 $subject = str_replace('"', "'", $subject);
1074                 $subject = trim($subject);
1075                 if (substr(strtolower($subject), 0, 3) != 're:') {
1076                     $subject = 'Re: ' . $subject;
1077                 }
1078                 /* this corrects some wrapping/quoting problems on replies */
1079                 $rewrap_body = explode("\n", $body);
1080                 $from = (is_array($orig_header->from) && !empty($orig_header->from)) ? $orig_header->from[0] : $orig_header->from;
1081                 $body = '';
1082                 $strip_sigs = getPref($data_dir, $username, 'strip_sigs');
1083                 foreach ($rewrap_body as $line) {
1084                     if ($strip_sigs && rtrim($line, "\r\n") == '-- ') {
1085                         break;
1086                     }
1087                     if (preg_match("/^(>+)/", $line, $matches)) {
1088                         $gt = $matches[1];
1089                         $body .= $body_quote . str_replace("\n", "\n$body_quote$gt ", rtrim($line)) ."\n";
1090                     } else {
1091                         $body .= $body_quote . (!empty($body_quote) ? ' ' : '') . str_replace("\n", "\n$body_quote" . (!empty($body_quote) ? ' ' : ''), rtrim($line)) . "\n";
1092                     }
1093                 }
1094
1095                 //rewrap the body to clean up quotations and line lengths
1096                 $body = sqBodyWrap ($body, $editor_size);
1097
1098                 $body = getReplyCitation($from , $orig_header->date) . $body;
1099                 $composeMessage->reply_rfc822_header = $orig_header;
1100
1101                 break;
1102             default:
1103                 break;
1104         }
1105 //FIXME: we used to register $compose_messages in the session here, but not any more - so do we still need the session_write_close() and sqimap_logout() here?  We probably need the IMAP logout, but what about the session closure?
1106         session_write_close();
1107         sqimap_logout($imapConnection);
1108     }
1109     $ret = array( 'send_to' => $send_to,
1110             'send_to_cc' => $send_to_cc,
1111             'send_to_bcc' => $send_to_bcc,
1112             'subject' => $subject,
1113             'mailprio' => $mailprio,
1114             'body' => $body,
1115             'identity' => $identity );
1116
1117     return ($ret);
1118 } /* function newMail() */
1119
1120 /**
1121  * downloads attachments from original message, stores them in attachment directory and adds
1122  * them to composed message.
1123  * @param object $message
1124  * @param object $composeMessage
1125  * @param integer $passed_id
1126  * @param mixed $entities
1127  * @param mixed $imapConnection
1128  * @return object
1129  */
1130 function getAttachments($message, &$composeMessage, $passed_id, $entities, $imapConnection) {
1131     global $squirrelmail_language, $languages, $username, $attachment_dir;
1132
1133     if (!count($message->entities) ||
1134             ($message->type0 == 'message' && $message->type1 == 'rfc822')) {
1135         if ( !in_array($message->entity_id, $entities) && $message->entity_id) {
1136             switch ($message->type0) {
1137                 case 'message':
1138                     if ($message->type1 == 'rfc822') {
1139                         $filename = $message->rfc822_header->subject;
1140                         if ($filename == "") {
1141                             $filename = "untitled-".$message->entity_id;
1142                         }
1143                         $filename .= '.eml';
1144                     } else {
1145                         $filename = $message->getFilename();
1146                     }
1147                     break;
1148                 default:
1149                     if (!$message->mime_header) { /* temporary hack */
1150                         $message->mime_header = $message->header;
1151                     }
1152                     $filename = $message->getFilename();
1153                     break;
1154             }
1155 //FIXME: added three args to the following, so as to set the last one to TRUE, to mimick a fix in 1.4.21 (#2994865), but didn't test this (note that in 1.4.21, the 2nd and 3rd args are FALSE, but here in this code, they weren't being specified (thus defaulting to TRUE), so I don't know if that means this code is outdated and should have been changed to FALSE, FALSE or if this code is completely different and the addition of the TRUE for arg #4 is wrong
1156             $filename = str_replace('&#32;', ' ', decodeHeader($filename, true, true, true));
1157             if (isset($languages[$squirrelmail_language]['XTRA_CODE']) &&
1158                     function_exists($languages[$squirrelmail_language]['XTRA_CODE'] . '_encode')) {
1159                 $filename =  call_user_func($languages[$squirrelmail_language]['XTRA_CODE'] . '_encode', $filename);
1160             }
1161
1162             $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
1163             $localfilename = sq_get_attach_tempfile();
1164             $message->att_local_name = $localfilename;
1165
1166             $composeMessage->initAttachment($message->type0.'/'.$message->type1,$filename,
1167                     $localfilename);
1168
1169             /* Write Attachment to file */
1170             $fp = fopen ($hashed_attachment_dir . '/' . $localfilename, 'wb');
1171             mime_print_body_lines ($imapConnection, $passed_id, $message->entity_id, $message->header->encoding, $fp);
1172             fclose ($fp);
1173         }
1174     } else {
1175         for ($i=0, $entCount=count($message->entities); $i<$entCount;$i++) {
1176             $composeMessage=getAttachments($message->entities[$i], $composeMessage, $passed_id, $entities, $imapConnection);
1177         }
1178     }
1179     return $composeMessage;
1180 }
1181
1182 function getMessage_RFC822_Attachment($message, $composeMessage, $passed_id,
1183         $passed_ent_id='', $imapConnection) {
1184     if (!$passed_ent_id) {
1185         $body_a = sqimap_run_command($imapConnection,
1186                 'FETCH '.$passed_id.' RFC822',
1187                 TRUE, $response, $readmessage,
1188                 TRUE);
1189     } else {
1190         $body_a = sqimap_run_command($imapConnection,
1191                 'FETCH '.$passed_id.' BODY['.$passed_ent_id.']',
1192                 TRUE, $response, $readmessage, TRUE);
1193         $message = $message->parent;
1194     }
1195     if ($response == 'OK') {
1196         $subject = encodeHeader($message->rfc822_header->subject);
1197         array_shift($body_a);
1198         array_pop($body_a);
1199         $body = implode('', $body_a) . "\r\n";
1200
1201         global $username, $attachment_dir;
1202         $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
1203         $localfilename = sq_get_attach_tempfile();
1204         $fp = fopen($hashed_attachment_dir . '/' . $localfilename, 'wb');
1205         fwrite ($fp, $body);
1206         fclose($fp);
1207         $composeMessage->initAttachment('message/rfc822',$subject.'.eml',
1208                 $localfilename);
1209     }
1210     return $composeMessage;
1211 }
1212
1213 function showInputForm ($session, $values=false) {
1214     global $send_to, $send_to_cc, $send_to_bcc,
1215         $body, $startMessage, $action, $attachments,
1216         $use_signature, $signature, $prefix_sig, $session_expired,
1217         $editor_size, $editor_height, $subject, $newmail,
1218         $use_javascript_addr_book, $passed_id, $mailbox, $fwduid,
1219         $from_htmladdr_search, $location_of_buttons, $attachment_dir,
1220         $username, $data_dir, $identity, $idents, $delete_draft,
1221         $mailprio, $compose_new_win, $saved_draft, $mail_sent, $sig_first,
1222         $composeMessage, $composesession, $default_charset,
1223         $compose_onsubmit, $oTemplate, $oErrorHandler;
1224
1225     if (checkForJavascript()) {
1226         $onfocus = ' onfocus="alreadyFocused=true;"';
1227         $onfocus_array = array('onfocus' => 'alreadyFocused=true;');
1228     }
1229     else {
1230         $onfocus = '';
1231         $onfocus_array = array();
1232     }
1233
1234     if ($values) {
1235         $send_to = $values['send_to'];
1236         $send_to_cc = $values['send_to_cc'];
1237         $send_to_bcc = $values['send_to_bcc'];
1238         $subject = $values['subject'];
1239         $mailprio = $values['mailprio'];
1240         $body = $values['body'];
1241         $identity = (int) $values['identity'];
1242     } else {
1243         $send_to = decodeHeader($send_to, true, false);
1244         $send_to_cc = decodeHeader($send_to_cc, true, false);
1245         $send_to_bcc = decodeHeader($send_to_bcc, true, false);
1246     }
1247
1248     if ($use_javascript_addr_book) {
1249 //FIXME: NO HTML IN CORE!
1250         echo "\n". '<script type="text/javascript">'."\n<!--\n" .
1251             'function open_abook() { ' . "\n" .
1252             '  var nwin = window.open("addrbook_popup.php","abookpopup",' .
1253             '"width=670,height=300,resizable=yes,scrollbars=yes");' . "\n" .
1254             '  if((!nwin.opener) && (document.windows != null))' . "\n" .
1255             '    nwin.opener = document.windows;' . "\n" .
1256             "}\n" .
1257             "// -->\n</script>\n\n";
1258     }
1259
1260 //FIXME: NO HTML IN CORE!
1261     echo "\n" . '<form name="compose" action="compose.php" method="post" ' .
1262         'enctype="multipart/form-data"';
1263
1264     $compose_onsubmit = array();
1265     global $null;
1266     do_hook('compose_form', $null);
1267
1268     // Plugins that use compose_form hook can add an array entry
1269     // to the globally scoped $compose_onsubmit; we add them up
1270     // here and format the form tag's full onsubmit handler.
1271     // Each plugin should use "return false" if they need to
1272     // stop form submission but otherwise should NOT use "return
1273     // true" to give other plugins the chance to do what they need
1274     // to do; SquirrelMail itself will add the final "return true".
1275     // Onsubmit text is enclosed inside of double quotes, so plugins
1276     // need to quote accordingly.
1277     //
1278     // Also, plugin authors should try to retain compatibility with
1279     // the Compose Extras plugin by resetting its compose submit
1280     // counter when preventing form submit.  Use this code:
1281     // if (your-code-here) { submit_count = 0; return false; }
1282     //
1283     if (checkForJavascript()) {
1284         if (empty($compose_onsubmit))
1285             $compose_onsubmit = array();
1286         else if (!is_array($compose_onsubmit))
1287             $compose_onsubmit = array($compose_onsubmit);
1288
1289         $onsubmit_text = '';
1290         foreach ($compose_onsubmit as $text) {
1291             $text = trim($text);
1292             if (!empty($text)) {
1293                 if (substr($text, -1) != ';' && substr($text, -1) != '}')
1294                     $text .= '; ';
1295                 $onsubmit_text .= $text;
1296             }
1297         }
1298
1299         if (!empty($onsubmit_text))
1300 //FIXME: DON'T ECHO HTML FROM CORE!
1301             echo ' onsubmit="' . $onsubmit_text . ' return true;"';
1302     }
1303
1304
1305 //FIXME: NO HTML IN CORE!
1306     echo ">\n";
1307
1308 //FIXME: DON'T ECHO HTML FROM CORE!
1309     echo addHidden('smtoken', sm_generate_security_token());
1310
1311 //FIXME: DON'T ECHO HTML FROM CORE!
1312     echo addHidden('startMessage', $startMessage);
1313
1314     if ($action == 'draft') {
1315 //FIXME: DON'T ECHO HTML FROM CORE!
1316         echo addHidden('delete_draft', $passed_id);
1317     }
1318     if (isset($delete_draft)) {
1319 //FIXME: DON'T ECHO HTML FROM CORE!
1320         echo addHidden('delete_draft', $delete_draft);
1321     }
1322     if (isset($session)) {
1323 //FIXME: DON'T ECHO HTML FROM CORE!
1324         echo addHidden('session', $session);
1325     }
1326
1327     if (isset($passed_id)) {
1328 //FIXME: DON'T ECHO HTML FROM CORE!
1329         echo addHidden('passed_id', $passed_id);
1330     }
1331
1332     if (isset($fwduid)) {
1333 //FIXME: DON'T ECHO HTML FROM CORE!
1334         echo addHidden('fwduid', $fwduid);
1335     }
1336
1337     if ($saved_draft == 'yes') {
1338         $oTemplate->assign('note', _("Your draft has been saved."));
1339         $oTemplate->display('note.tpl');
1340     }
1341     if ($mail_sent == 'yes') {
1342         $oTemplate->assign('note', _("Your mail has been sent."));
1343         $oTemplate->display('note.tpl');
1344     }
1345     if ($compose_new_win == '1') {
1346         $oTemplate->display('compose_newwin_close.tpl');
1347     }
1348
1349     if ($location_of_buttons == 'top') {
1350 //FIXME: DON'T ECHO HTML FROM CORE!
1351         showComposeButtonRow();
1352     }
1353
1354     $identities = array();
1355     if (count($idents) > 1) {
1356         reset($idents);
1357         foreach($idents as $id => $data) {
1358             $identities[$id] = $data['full_name'].' &lt;'.$data['email_address'].'&gt;';
1359         }
1360     }
1361
1362     $oTemplate->assign('identities', $identities);
1363     $oTemplate->assign('identity_def', $identity);
1364     $oTemplate->assign('input_onfocus', 'onfocus="'.join(' ', $onfocus_array).'"');
1365
1366     $oTemplate->assign('to', sm_encode_html_special_chars($send_to));
1367     $oTemplate->assign('cc', sm_encode_html_special_chars($send_to_cc));
1368     $oTemplate->assign('bcc', sm_encode_html_special_chars($send_to_bcc));
1369     $oTemplate->assign('subject', sm_encode_html_special_chars($subject));
1370
1371     // access keys...
1372     //
1373     global $accesskey_compose_to, $accesskey_compose_cc,
1374            $accesskey_compose_identity, $accesskey_compose_bcc,
1375            $accesskey_compose_subject;
1376     $oTemplate->assign('accesskey_compose_identity', $accesskey_compose_identity);
1377     $oTemplate->assign('accesskey_compose_to', $accesskey_compose_to);
1378     $oTemplate->assign('accesskey_compose_cc', $accesskey_compose_cc);
1379     $oTemplate->assign('accesskey_compose_bcc', $accesskey_compose_bcc);
1380     $oTemplate->assign('accesskey_compose_subject', $accesskey_compose_subject);
1381
1382     $oTemplate->display('compose_header.tpl');
1383
1384     if ($location_of_buttons == 'between') {
1385 //FIXME: DON'T ECHO HTML FROM CORE!
1386         showComposeButtonRow();
1387     }
1388
1389     $body_str = '';
1390     if ($use_signature == true && $newmail == true && !isset($from_htmladdr_search)) {
1391         $signature = $idents[$identity]['signature'];
1392
1393         if ($sig_first == '1') {
1394             /*
1395              * FIXME: test is specific to ja_JP translation implementation.
1396              * This test might apply incorrect conversion to other translations, but
1397              * use of 7bit iso-2022-jp charset in other translations might have other
1398              * issues too.
1399              */
1400             if ($default_charset == 'iso-2022-jp') {
1401                 $body_str = "\n\n".($prefix_sig==true? "-- \n":'').mb_convert_encoding($signature, 'EUC-JP');
1402             } else {
1403                 $body_str = "\n\n".($prefix_sig==true? "-- \n":'').decodeHeader($signature,false,false);
1404             }
1405             $body_str .= "\n\n".sm_encode_html_special_chars(decodeHeader($body,false,false));
1406         } else {
1407             $body_str = "\n\n".sm_encode_html_special_chars(decodeHeader($body,false,false));
1408             // FIXME: test is specific to ja_JP translation implementation. See above comments.
1409             if ($default_charset == 'iso-2022-jp') {
1410                 $body_str .= "\n\n".($prefix_sig==true? "-- \n":'').mb_convert_encoding($signature, 'EUC-JP');
1411             } else {
1412                 $body_str .= "\n\n".($prefix_sig==true? "-- \n":'').decodeHeader($signature,false,false);
1413             }
1414         }
1415     } else {
1416         $body_str = sm_encode_html_special_chars(decodeHeader($body,false,false));
1417     }
1418
1419     $oTemplate->assign('editor_width', (int)$editor_size);
1420     $oTemplate->assign('editor_height', (int)$editor_height);
1421     $oTemplate->assign('input_onfocus', 'onfocus="'.join(' ', $onfocus_array).'"');
1422     $oTemplate->assign('body', $body_str);
1423     $oTemplate->assign('show_bottom_send', $location_of_buttons!='bottom');
1424
1425     // access keys...
1426     //
1427     global $accesskey_compose_body, $accesskey_compose_send;
1428     $oTemplate->assign('accesskey_compose_body', $accesskey_compose_body);
1429     $oTemplate->assign('accesskey_compose_send', $accesskey_compose_send);
1430
1431     $oTemplate->display ('compose_body.tpl');
1432
1433     if ($location_of_buttons == 'bottom') {
1434 //FIXME: DON'T ECHO HTML FROM CORE!
1435         showComposeButtonRow();
1436     }
1437
1438     // composeMessage can be empty when coming from a restored session
1439     if (is_object($composeMessage) && $composeMessage->entities)
1440         $attach_array = $composeMessage->entities;
1441     if ($session_expired && !empty($attachments) && is_array($attachments))
1442         $attach_array = $attachments;
1443
1444     /* This code is for attachments */
1445     if ((bool) ini_get('file_uploads')) {
1446
1447         /* Calculate the max size for an uploaded file.
1448          * This is advisory for the user because we can't actually prevent
1449          * people to upload too large files. */
1450         $sizes = array();
1451         /* php.ini vars which influence the max for uploads */
1452         $configvars = array('post_max_size', 'memory_limit', 'upload_max_filesize');
1453         foreach($configvars as $var) {
1454             /* skip 0 or empty values, and -1 which means 'unlimited' */
1455             if( $size = getByteSize(ini_get($var)) ) {
1456                 if ( $size != '-1' ) {
1457                     $sizes[] = $size;
1458                 }
1459             }
1460         }
1461
1462         $attach = array();
1463         global $username, $attachment_dir;
1464         $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
1465         if (!empty($attach_array)) {
1466             foreach ($attach_array as $key => $attachment) {
1467                 $attached_file = $attachment->att_local_name;
1468                 if ($attachment->att_local_name || $attachment->body_part) {
1469                     $attached_filename = decodeHeader($attachment->mime_header->getParameter('name'));
1470                     $type = $attachment->mime_header->type0.'/'.
1471                         $attachment->mime_header->type1;
1472
1473                     $a = array();
1474                     $a['Key'] = $key;
1475                     $a['FileName'] = $attached_filename;
1476                     $a['ContentType'] = $type;
1477                     $a['Size'] = filesize($hashed_attachment_dir . '/' . $attached_file);
1478                     $attach[$key] = $a;
1479                 }
1480             }
1481         }
1482
1483         $max = min($sizes);
1484         $oTemplate->assign('max_file_size', empty($max) ? -1 : $max);
1485         $oTemplate->assign('attachments', $attach);
1486
1487         // access keys...
1488         //
1489         global $accesskey_compose_attach_browse, $accesskey_compose_attach,
1490                $accesskey_compose_delete_attach;
1491         $oTemplate->assign('accesskey_compose_attach_browse', $accesskey_compose_attach_browse);
1492         $oTemplate->assign('accesskey_compose_attach', $accesskey_compose_attach);
1493         $oTemplate->assign('accesskey_compose_delete_attach', $accesskey_compose_delete_attach);
1494
1495         $oTemplate->display('compose_attachments.tpl');
1496     } // End of file_uploads if-block
1497     /* End of attachment code */
1498
1499     $oTemplate->assign('username', $username);
1500     $oTemplate->assign('smaction', $action);
1501     $oTemplate->assign('mailbox', $mailbox);
1502     sqgetGlobalVar('QUERY_STRING', $queryString, SQ_SERVER);
1503     $oTemplate->assign('querystring', $queryString);
1504     $oTemplate->assign('composesession', $composesession);
1505     $oTemplate->assign('send_button_count', unique_widget_name('send', TRUE));
1506     if (!empty($attach_array))
1507         $oTemplate->assign('attachments', urlencode(serialize($attach_array)));
1508
1509     $aUserNotices = array();
1510
1511     // File uploads are off, so we didn't show that part of the form.
1512     // To avoid bogus bug reports, tell the user why.
1513     if (!(bool) ini_get('file_uploads')) {
1514         $aUserNotices[] = _("Because PHP file uploads are turned off, you can not attach files to this message. Please see your system administrator for details.");
1515     }
1516
1517     $oTemplate->assign('user_notices', $aUserNotices);
1518
1519     $oTemplate->display('compose_form_close.tpl');
1520
1521     if ($compose_new_win=='1') {
1522         $oTemplate->display('compose_newwin_close.tpl');
1523     }
1524
1525     $oErrorHandler->setDelayedErrors(false);
1526     $oTemplate->display('footer.tpl');
1527 }
1528
1529
1530 function showComposeButtonRow() {
1531     global $use_javascript_addr_book, $save_as_draft,
1532         $default_use_priority, $mailprio, $default_use_mdn,
1533         $request_mdn, $request_dr,
1534         $data_dir, $username;
1535
1536     global $oTemplate, $buffer_hook;
1537
1538     if ($default_use_priority) {
1539         $priorities = array('1'=>_("High"), '3'=>_("Normal"), '5'=>_("Low"));
1540         $priority = isset($mailprio) ? $mailprio : 3;
1541     } else {
1542         $priorities = array();
1543         $priority = NULL;
1544     }
1545
1546     $mdn_user_support=getPref($data_dir, $username, 'mdn_user_support',$default_use_mdn);
1547
1548     $address_book_button_attribs = array();
1549     global $accesskey_compose_addresses;
1550     if ($accesskey_compose_addresses != 'NONE')
1551         $address_book_button_attribs['accesskey'] = $accesskey_compose_addresses;
1552     if ($use_javascript_addr_book && checkForJavascript()) {
1553         $addr_book = addButton(_("Addresses"),
1554                                null,
1555                                array_merge($address_book_button_attribs, array('onclick' => 'javascript:open_abook();')));
1556     } else {
1557         $addr_book = addSubmit(_("Addresses"), 'html_addr_search', $address_book_button_attribs);
1558     }
1559
1560     $oTemplate->assign('allow_priority', $default_use_priority==1);
1561     $oTemplate->assign('priority_list', $priorities);
1562     $oTemplate->assign('current_priority', $priority);
1563
1564     $oTemplate->assign('notifications_enabled', $mdn_user_support==1);
1565     $oTemplate->assign('read_receipt', $request_mdn=='1');
1566     $oTemplate->assign('delivery_receipt', $request_dr=='1');
1567
1568     $oTemplate->assign('drafts_enabled', $save_as_draft);
1569     $oTemplate->assign('address_book_button', $addr_book);
1570
1571     // access keys...
1572     //
1573     global $accesskey_compose_priority, $accesskey_compose_on_read,
1574            $accesskey_compose_on_delivery, $accesskey_compose_signature,
1575            $accesskey_compose_save_draft, $accesskey_compose_send;
1576     $oTemplate->assign('accesskey_compose_priority', $accesskey_compose_priority);
1577     $oTemplate->assign('accesskey_compose_on_read', $accesskey_compose_on_read);
1578     $oTemplate->assign('accesskey_compose_on_delivery', $accesskey_compose_on_delivery);
1579     $oTemplate->assign('accesskey_compose_signature', $accesskey_compose_signature);
1580     $oTemplate->assign('accesskey_compose_save_draft', $accesskey_compose_save_draft);
1581     $oTemplate->assign('accesskey_compose_send', $accesskey_compose_send);
1582
1583     $oTemplate->display('compose_buttons.tpl');
1584 }
1585
1586 function checkInput ($show) {
1587     /*
1588      * I implemented the $show variable because the error messages
1589      * were getting sent before the page header.  So, I check once
1590      * using $show=false, and then when i'm ready to display the error
1591      * message, show=true
1592      */
1593     global $send_to, $send_to_cc, $send_to_bcc;
1594
1595     $send_to = trim($send_to);
1596     $send_to_cc = trim($send_to_cc);
1597     $send_to_bcc = trim($send_to_bcc);
1598     if (empty($send_to) && empty($send_to_cc) && empty($send_to_bcc)) {
1599         if ($show) {
1600             plain_error_message(_("You have not filled in the \"To:\" field."));
1601         }
1602         return false;
1603     }
1604     return true;
1605 } /* function checkInput() */
1606
1607
1608 /* True if FAILURE */
1609 function saveAttachedFiles($session) {
1610     global $composeMessage, $username, $attachment_dir;
1611
1612     /* get out of here if no file was attached at all */
1613     if (! is_uploaded_file($_FILES['attachfile']['tmp_name']) ) {
1614         return true;
1615     }
1616
1617     $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
1618     $localfilename = sq_get_attach_tempfile();
1619     $fullpath = $hashed_attachment_dir . '/' . $localfilename;
1620
1621     // m_u_f works better with restricted PHP installs (safe_mode, open_basedir),
1622     // if that doesn't work, try a simple rename.
1623     if (!sq_call_function_suppress_errors('move_uploaded_file', array($_FILES['attachfile']['tmp_name'], $fullpath))) {
1624         if (!sq_call_function_suppress_errors('rename', array($_FILES['attachfile']['tmp_name'], $fullpath))) {
1625             return true;
1626         }
1627     }
1628     $type = strtolower($_FILES['attachfile']['type']);
1629     $name = $_FILES['attachfile']['name'];
1630     $composeMessage->initAttachment($type, $name, $localfilename);
1631 }
1632
1633 /**
1634   * Parse strings such as "8M" and "2k" into their corresponding size in bytes
1635   *
1636   * NOTE: This function only recognizes the suffixes "K", "M" and "G"
1637   *       and will probably break very easily if the given size is in
1638   *       some completely different format.
1639   *
1640   * @param string $ini_size The input string to be converted
1641   *
1642   * @return mixed Boolean FALSE if something went wrong (the value passed in
1643   *               was empty?, the suffix was not recognized?), otherwise, the
1644   *               converted size in bytes (just the number (as an integer),
1645   *               no unit identifier included)
1646   *
1647   */
1648 function getByteSize($ini_size) {
1649
1650     if(!$ini_size) {
1651         return FALSE;
1652     }
1653
1654     $ini_size = trim($ini_size);
1655
1656     // if there's some kind of letter at the end of the string we need to multiply.
1657     if(!is_numeric(substr($ini_size, -1))) {
1658
1659         switch(strtoupper(substr($ini_size, -1))) {
1660             case 'G':
1661                 $bytesize = 1073741824;
1662                 break;
1663             case 'M':
1664                 $bytesize = 1048576;
1665                 break;
1666             case 'K':
1667                 $bytesize = 1024;
1668                 break;
1669              default:
1670                 return FALSE;
1671         }
1672
1673         return ($bytesize * (int)substr($ini_size, 0, -1));
1674     }
1675
1676     return $ini_size;
1677 }
1678
1679
1680 /**
1681  * temporary function to make use of the deliver class.
1682  * In the future the responsible backend should be automaticly loaded
1683  * and conf.pl should show a list of available backends.
1684  * The message also should be constructed by the message class.
1685  *
1686  * @param object $composeMessage The message being sent.  Please note
1687  *                               that it is passed by reference and
1688  *                               will be returned modified, with additional
1689  *                               headers, such as Message-ID, Date, In-Reply-To,
1690  *                               References, and so forth.
1691  *
1692  * @return boolean FALSE if delivery failed, or some non-FALSE value
1693  *                 upon success.
1694  *
1695  */
1696 function deliverMessage(&$composeMessage, $draft=false) {
1697     global $send_to, $send_to_cc, $send_to_bcc, $mailprio, $subject, $body,
1698         $username, $identity, $idents, $data_dir,
1699         $request_mdn, $request_dr, $default_charset, $useSendmail,
1700         $domain, $action, $default_move_to_sent, $move_to_sent,
1701         $imapServerAddress, $imapPort, $imap_stream_options, $sent_folder, $key;
1702
1703     $rfc822_header = $composeMessage->rfc822_header;
1704
1705     $abook = addressbook_init(false, true);
1706     $rfc822_header->to = $rfc822_header->parseAddress($send_to,true, array(), '', $domain, array(&$abook,'lookup'));
1707     $rfc822_header->cc = $rfc822_header->parseAddress($send_to_cc,true,array(), '',$domain, array(&$abook,'lookup'));
1708     $rfc822_header->bcc = $rfc822_header->parseAddress($send_to_bcc,true, array(), '',$domain, array(&$abook,'lookup'));
1709     $rfc822_header->priority = $mailprio;
1710     $rfc822_header->subject = $subject;
1711
1712     $special_encoding='';
1713     if (strtolower($default_charset) == 'iso-2022-jp') {
1714         if (mb_detect_encoding($body) == 'ASCII') {
1715             $special_encoding = '8bit';
1716         } else {
1717             $body = mb_convert_encoding($body, 'JIS');
1718             $special_encoding = '7bit';
1719         }
1720     }
1721     $composeMessage->setBody($body);
1722
1723     $reply_to = '';
1724     $reply_to  = $idents[$identity]['reply_to'];
1725     if ($reply_to && strpos($reply_to, '@') === FALSE)
1726         $reply_to .= '@' . $domain;
1727
1728     $from_addr = build_from_header($identity);
1729     $rfc822_header->from = $rfc822_header->parseAddress($from_addr,true);
1730     if ($reply_to) {
1731         $rfc822_header->reply_to = $rfc822_header->parseAddress($reply_to,true);
1732     }
1733     /* Receipt: On Read */
1734     if (isset($request_mdn) && $request_mdn) {
1735         $rfc822_header->dnt = $rfc822_header->parseAddress($from_addr,true);
1736     } elseif (isset($rfc822_header->dnt)) {
1737         unset($rfc822_header->dnt);
1738     }
1739
1740     /* Receipt: On Delivery */
1741     if (!empty($request_dr)) {
1742 //FIXME: it would be better to fiddle with headers inside of the message object or possibly when delivering the message to its destination; is this possible?
1743         $rfc822_header->more_headers['Return-Receipt-To'] = $from_addr;
1744     } elseif (isset($rfc822_header->more_headers['Return-Receipt-To'])) {
1745         unset($rfc822_header->more_headers['Return-Receipt-To']);
1746     }
1747
1748     /* multipart messages */
1749     if (count($composeMessage->entities)) {
1750         $message_body = new Message();
1751         $message_body->body_part = $composeMessage->body_part;
1752         $composeMessage->body_part = '';
1753         $mime_header = new MessageHeader;
1754         $mime_header->type0 = 'text';
1755         $mime_header->type1 = 'plain';
1756         if ($special_encoding) {
1757             $mime_header->encoding = $special_encoding;
1758         } else {
1759             $mime_header->encoding = '8bit';
1760         }
1761         if ($default_charset) {
1762             $mime_header->parameters['charset'] = $default_charset;
1763         }
1764         $message_body->mime_header = $mime_header;
1765         array_unshift($composeMessage->entities, $message_body);
1766         $content_type = new ContentType('multipart/mixed');
1767     } else {
1768         $content_type = new ContentType('text/plain');
1769         if ($special_encoding) {
1770             $rfc822_header->encoding = $special_encoding;
1771         } else {
1772             $rfc822_header->encoding = '8bit';
1773         }
1774         if ($default_charset) {
1775             $content_type->properties['charset']=$default_charset;
1776         }
1777     }
1778
1779     $rfc822_header->content_type = $content_type;
1780     $composeMessage->rfc822_header = $rfc822_header;
1781     if ($action == 'reply' || $action == 'reply_all') {
1782         global $passed_id, $passed_ent_id;
1783         $reply_id = $passed_id;
1784         $reply_ent_id = $passed_ent_id;
1785     } else {
1786         $reply_id = '';
1787         $reply_ent_id = '';
1788     }
1789
1790     /* Here you can modify the message structure just before we hand
1791        it over to deliver; plugin authors note that $composeMessage
1792        is sent and modified by reference since 1.5.2 */
1793     do_hook('compose_send', $composeMessage);
1794 //TODO: need to migrate to the following, but it neessitates changes in existing plugins, since the args are now an array
1795     //$temp = array(&$composeMessage, &$draft);
1796     //do_hook('compose_send', $temp);
1797
1798     // remove special header if present and prepare to mark
1799     // a message that a draft was composed in reply to
1800     if (!empty($composeMessage->rfc822_header->x_sm_flag_reply) && !$draft) {
1801         global $passed_id, $mailbox;
1802         // tricks the code below that marks the reply
1803         list($action, $passed_id, $mailbox) = explode('::', $rfc822_header->x_sm_flag_reply, 3);
1804         unset($composeMessage->rfc822_header->x_sm_flag_reply);
1805         unset($composeMessage->rfc822_header->more_headers['X-SM-Flag-Reply']);
1806     }
1807
1808     if (!$useSendmail && !$draft) {
1809         require_once(SM_PATH . 'class/deliver/Deliver_SMTP.class.php');
1810         $deliver = new Deliver_SMTP();
1811         global $smtpServerAddress, $smtpPort, $smtp_stream_options, $pop_before_smtp, $pop_before_smtp_host;
1812
1813         $authPop = (isset($pop_before_smtp) && $pop_before_smtp) ? true : false;
1814         if (empty($pop_before_smtp_host)) $pop_before_smtp_host = $smtpServerAddress;
1815         get_smtp_user($user, $pass);
1816         $stream = $deliver->initStream($composeMessage,$domain,0,
1817                 $smtpServerAddress, $smtpPort, $user, $pass, $authPop, $pop_before_smtp_host, $smtp_stream_options);
1818     } elseif (!$draft) {
1819         require_once(SM_PATH . 'class/deliver/Deliver_SendMail.class.php');
1820         global $sendmail_path, $sendmail_args;
1821         // Check for outdated configuration
1822         if (!isset($sendmail_args)) {
1823             if ($sendmail_path=='/var/qmail/bin/qmail-inject') {
1824                 $sendmail_args = '';
1825             } else {
1826                 $sendmail_args = '-i -t';
1827             }
1828         }
1829         $deliver = new Deliver_SendMail(array('sendmail_args'=>$sendmail_args));
1830         $stream = $deliver->initStream($composeMessage,$sendmail_path);
1831     } elseif ($draft) {
1832         global $draft_folder;
1833         $imap_stream = sqimap_login($username, false, $imapServerAddress,
1834                 $imapPort, 0, $imap_stream_options);
1835         if (sqimap_mailbox_exists ($imap_stream, $draft_folder)) {
1836 //TODO: this can leak private information about folders and message IDs if messages are accessed/sent from another client --- should this feature be optional?
1837             // make note of the message to mark as having been replied to
1838             global $passed_id, $mailbox;
1839             if ($action == 'reply' || $action == 'reply_all' || $action == 'forward' || $action == 'forward_as_attachment') {
1840                 $composeMessage->rfc822_header->more_headers['X-SM-Flag-Reply'] = $action . '::' . $passed_id . '::' . $mailbox;
1841             }
1842
1843             require_once(SM_PATH . 'class/deliver/Deliver_IMAP.class.php');
1844             $imap_deliver = new Deliver_IMAP();
1845             $success = $imap_deliver->mail($composeMessage, $imap_stream, $reply_id, $reply_ent_id, $imap_stream, $draft_folder);
1846             sqimap_logout($imap_stream);
1847             unset ($imap_deliver);
1848             $composeMessage->purgeAttachments();
1849             return $success;
1850         } else {
1851             $msg  = '<br />'.sprintf(_("Error: Draft folder %s does not exist."), sm_encode_html_special_chars($draft_folder));
1852             plain_error_message($msg);
1853             return false;
1854         }
1855     }
1856     $success = false;
1857     if ($stream) {
1858         $deliver->mail($composeMessage, $stream, $reply_id, $reply_ent_id);
1859         $success = $deliver->finalizeStream($stream);
1860     }
1861     if (!$success) {
1862         // $deliver->dlv_server_msg is not always server's reply
1863         $msg = _("Message not sent.")
1864              . "<br />\n"
1865              . (isset($deliver->dlv_msg) ? $deliver->dlv_msg : '');
1866         if (!empty($deliver->dlv_server_msg)) {
1867             // add 'server replied' part only when it is not empty.
1868             // Delivery error can be generated by delivery class itself
1869             $msg .= '<br />'
1870                   . _("Server replied:") . ' '
1871                   . (isset($deliver->dlv_ret_nr) ? $deliver->dlv_ret_nr . ' ' : '')
1872                   . nl2br(sm_encode_html_special_chars($deliver->dlv_server_msg));
1873         }
1874         plain_error_message($msg);
1875     } else {
1876         unset ($deliver);
1877         $imap_stream = sqimap_login($username, false, $imapServerAddress, $imapPort, 0, $imap_stream_options);
1878
1879
1880         // mark as replied or forwarded if applicable
1881         //
1882         global $what, $iAccount, $startMessage, $passed_id, $fwduid, $mailbox;
1883
1884         if ($action=='reply' || $action=='reply_all' || $action=='forward' || $action=='forward_as_attachment') {
1885             require(SM_PATH . 'functions/mailbox_display.php');
1886             // select errors here could be due to a draft reply being sent
1887             // after the original message's mailbox is moved or deleted
1888             $aMailbox = sqm_api_mailbox_select($imap_stream, $iAccount, $mailbox,array('setindex' => $what, 'offset' => $startMessage),array(), false);
1889             // a non-empty return from above means we can proceed
1890             if (!empty($aMailbox)) {
1891                 switch($action) {
1892                 case 'reply':
1893                 case 'reply_all':
1894                     // check if we are allowed to set the \\Answered flag
1895                     if (in_array('\\answered',$aMailbox['PERMANENTFLAGS'], true)) {
1896                         $aUpdatedMsgs = sqimap_toggle_flag($imap_stream, array($passed_id), '\\Answered', true, false);
1897                         if (isset($aUpdatedMsgs[$passed_id]['FLAGS'])) {
1898                             /**
1899                             * Only update the cached headers if the header is
1900                             * cached.
1901                             */
1902                             if (isset($aMailbox['MSG_HEADERS'][$passed_id])) {
1903                                 $aMailbox['MSG_HEADERS'][$passed_id]['FLAGS'] = $aMsg['FLAGS'];
1904                             }
1905                         }
1906                     }
1907                     break;
1908                 case 'forward':
1909                 case 'forward_as_attachment':
1910                     // check if we are allowed to set the $Forwarded flag (RFC 4550 paragraph 2.8)
1911                     if (in_array('$forwarded',$aMailbox['PERMANENTFLAGS'], true) ||
1912                         in_array('\\*',$aMailbox['PERMANENTFLAGS'])) {
1913
1914                         // when forwarding as an attachment from the message
1915                         // list, passed_id is not used, need to get UID(s)
1916                         // from the query string
1917                         //
1918                         if (empty($passed_id) && !empty($fwduid))
1919                             $ids = explode('_', $fwduid);
1920                         else
1921                             $ids = array($passed_id);
1922
1923                         $aUpdatedMsgs = sqimap_toggle_flag($imap_stream, $ids, '$Forwarded', true, false);
1924
1925                         foreach ($ids as $id) {
1926                             if (isset($aUpdatedMsgs[$id]['FLAGS'])) {
1927                                 if (isset($aMailbox['MSG_HEADERS'][$id])) {
1928                                     $aMailbox['MSG_HEADERS'][$id]['FLAGS'] = $aMsg['FLAGS'];
1929                                 }
1930                             }
1931                         }
1932                     }
1933                     break;
1934                 }
1935
1936                 /**
1937                  * Write mailbox with updated seen flag information back to cache.
1938                  */
1939                 if(isset($aUpdatedMsgs[$passed_id])) {
1940                     $mailbox_cache[$iAccount.'_'.$aMailbox['NAME']] = $aMailbox;
1941                     sqsession_register($mailbox_cache,'mailbox_cache');
1942                 }
1943             }
1944         }
1945
1946
1947         // move to sent folder
1948         //
1949         $move_to_sent = getPref($data_dir,$username,'move_to_sent');
1950         if (isset($default_move_to_sent) && ($default_move_to_sent != 0)) {
1951             $svr_allow_sent = true;
1952         } else {
1953             $svr_allow_sent = false;
1954         }
1955
1956         if (isset($sent_folder) && (($sent_folder != '') || ($sent_folder != 'none'))
1957                 && sqimap_mailbox_exists( $imap_stream, $sent_folder)) {
1958             $fld_sent = true;
1959         } else {
1960             $fld_sent = false;
1961         }
1962
1963         if ((isset($move_to_sent) && ($move_to_sent != 0)) || (!isset($move_to_sent))) {
1964             $lcl_allow_sent = true;
1965         } else {
1966             $lcl_allow_sent = false;
1967         }
1968
1969         if (($fld_sent && $svr_allow_sent && !$lcl_allow_sent) || ($fld_sent && $lcl_allow_sent)) {
1970             if ($action == 'reply' || $action == 'reply_all') {
1971                 $save_reply_with_orig=getPref($data_dir,$username,'save_reply_with_orig');
1972                 if ($save_reply_with_orig) {
1973                     $sent_folder = $mailbox;
1974                 }
1975             }
1976             require_once(SM_PATH . 'class/deliver/Deliver_IMAP.class.php');
1977             $imap_deliver = new Deliver_IMAP();
1978             $imap_deliver->mail($composeMessage, $imap_stream, $reply_id, $reply_ent_id, $imap_stream, $sent_folder);
1979             unset ($imap_deliver);
1980         }
1981
1982
1983         // final cleanup
1984         //
1985         $composeMessage->purgeAttachments();
1986         sqimap_logout($imap_stream);
1987
1988     }
1989     return $success;
1990 }